Skip to content

Commit

Permalink
Update curve library dependency (#88)
Browse files Browse the repository at this point in the history
The curve library has a [timing-related vulnerability](GHSA-x4gp-pqpj-f43q) that was recently patched. This PR updates this dependency to require the patch.
  • Loading branch information
AaronFeickert authored Jun 27, 2024
1 parent dd1611f commit 1897dfb
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ categories = ["cryptography"]
[dependencies]
blake3 = { version = "1.5.1", default-features = false }
crypto-bigint = { version = "0.5.5", default-features = false }
curve25519-dalek = { version = "4.1.2", default-features = false, features = ["alloc", "digest", "rand_core", "zeroize"] }
curve25519-dalek = { version = "4.1.3", default-features = false, features = ["alloc", "digest", "rand_core", "zeroize"] }
itertools = { version = "0.12.1", default-features = false }
merlin = { version = "3.0.0", default-features = false }
rand_core = { version = "0.6.4", default-features = false }
Expand Down

0 comments on commit 1897dfb

Please sign in to comment.