Skip to content

Bumps crypto versions to fix cargo audit - #826

Open
kaczmarczyck wants to merge 1 commit into
google:developfrom
kaczmarczyck:crypto-bump
Open

kaczmarczyck wants to merge 1 commit into
google:developfrom
kaczmarczyck:crypto-bump

Conversation

@kaczmarczyck

Copy link
Copy Markdown
Collaborator

Upgrades p256 to 0.14.0 along with rand_core and matching RustCrypto crates so crypto-bigint resolves to >=0.7.6 (RUSTSEC-2026-0387) across all workspace and fuzz lockfiles.

TODO:

  • Coordinate with a Wasefire bump to the same versions
  • Measure speed

Upgrades p256 to 0.14.0 along with rand_core and matching RustCrypto
crates so crypto-bigint resolves to >=0.7.6 (RUSTSEC-2026-0387) across
all workspace and fuzz lockfiles.
@kaczmarczyck
kaczmarczyck requested a review from ia0 October 27, 2026 09:03
@kaczmarczyck kaczmarczyck self-assigned this Oct 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants