search

DaGenix / rust-crypto

A (mostly) pure-Rust implementation of various cryptographic algorithms.
Apache License 2.0
1.38k stars 296 forks source link

Add deprecation warning #467

Open DavidBM opened 3 years ago

DavidBM commented 3 years ago

Hi!

So this crate in wonderful and helped a lot some time ago.

Said that, newest commit in this project dates from 5 years ago. Sometimes, when searching things like "scrypt rust" in search engines you get this repository as first result, which is dangerous as it wasn't maintained for 5 year now. See also: https://rustsec.org/advisories/RUSTSEC-2016-0005.html

I think at least this project can show a deprecation warning in the Readme in order to point to https://github.com/RustCrypto/ which is properly maintained.

Hope this PR comes well. And thanks for all the Job done on this crate.

dobromyslov commented 2 years ago

@DavidBM thanks for this notice. It helped me to distinguish pros and cons in this question: https://stackoverflow.com/questions/70701405/what-sha256-rust-implementation-take-for-no-std-embedded-device

tarcieri commented 2 years ago

The @RustSec project has filed RUSTSEC-2016-0005 as an advisory that rust-crypto is unmaintained.

The advisory suggests several alternatives.