fpco / amber

Manage secret values in-repo via public key cryptography
MIT License
86 stars 9 forks source link

Migrate from sodiumoxide to crypto_box #32

Closed psibi closed 2 years ago

psibi commented 2 years ago

From last year, sodiumoxide has been unmaintained and there is a RUSTSEC advisory filed that has deprecated it's usage: https://rustsec.org/advisories/RUSTSEC-2021-0137.html

Also the original author of the crate has archived the repository.

This PR switches to use the crate crypto_box which is a pure Rust compatibility layer for Nacl libraries. I also had to use some other crates for computing SHA, hex decoding etc.