Andrew Gunnerson e929ecbe44 Replace ring with aws-lc ...

The author of ring recently announced that the library is no longer
being maintained and fixes for security issues may be significantly
delayed. Big thanks to Brian Smith for creating and maintaining the
library for so long!

This commit replaces ring with aws-lc, a cryptography library maintained
by Amazon AWS. It seems to be well-regarded and is used by high-profile
projects like rustls. It is also API-compatible with ring, so it is
effectively a drop-in replacement.

Unfortunately, we still cannot switch back to the RustCrypto SHA1 and
SHA2 implementations because they are still significantly slower than
ring and aws-lc on systems that do not support the SHA-NI extensions.

https://rustsec.org/advisories/RUSTSEC-2025-0007

Signed-off-by: Andrew Gunnerson <accounts+github@chiller3.com>

2025-02-21 20:44:19 -05:00

..

ci.yml

Replace ring with aws-lc

2025-02-21 20:44:19 -05:00

deny.yml

Update dependencies and fix most pedantic clippy warnings

2024-12-08 18:46:40 -05:00

release.yml

Update dependencies

2025-01-26 18:10:42 -05:00