laysakura / serde-encrypt

πŸ” Encrypts all the Serialize.
Apache License 2.0
175 stars 6 forks source link

Update dependencies and security margin #115

Open mikelodder7 opened 1 year ago

mikelodder7 commented 1 year ago

This updates the dependencies to secure versions since crypto_box 0.6 has a vulnerability. This also updates from using Chacha12 to Chacha20 which has higher security margins and performance difference is negligible.

codecov[bot] commented 1 year ago

Codecov Report

Patch coverage: 100.00% and project coverage change: -0.78% :warning:

Comparison is base (57fe97c) 81.81% compared to head (edf11c1) 81.03%.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #115 +/- ## ========================================== - Coverage 81.81% 81.03% -0.78% ========================================== Files 43 44 +1 Lines 2540 2573 +33 ========================================== + Hits 2078 2085 +7 - Misses 462 488 +26 ``` | [Files Changed](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani) | Coverage Ξ” | | |---|---|---| | [...crypt-core/src/encrypt/plain\_message\_shared\_key.rs](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani#diff-c2VyZGUtZW5jcnlwdC1jb3JlL3NyYy9lbmNyeXB0L3BsYWluX21lc3NhZ2Vfc2hhcmVkX2tleS5ycw==) | `87.87% <ΓΈ> (ΓΈ)` | | | [...crypt-core/src/encrypt/plain\_message\_public\_key.rs](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani#diff-c2VyZGUtZW5jcnlwdC1jb3JlL3NyYy9lbmNyeXB0L3BsYWluX21lc3NhZ2VfcHVibGljX2tleS5ycw==) | `97.72% <100.00%> (-0.06%)` | :arrow_down: | | [...ncrypt/plain\_message\_shared\_key/shared\_key\_core.rs](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani#diff-c2VyZGUtZW5jcnlwdC1jb3JlL3NyYy9lbmNyeXB0L3BsYWluX21lc3NhZ2Vfc2hhcmVkX2tleS9zaGFyZWRfa2V5X2NvcmUucnM=) | `100.00% <100.00%> (ΓΈ)` | | | [serde-encrypt-core/src/random.rs](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani#diff-c2VyZGUtZW5jcnlwdC1jb3JlL3NyYy9yYW5kb20ucnM=) | `100.00% <100.00%> (ΓΈ)` | | | [serde-encrypt-core/tests/test\_util/random/mod.rs](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani#diff-c2VyZGUtZW5jcnlwdC1jb3JlL3Rlc3RzL3Rlc3RfdXRpbC9yYW5kb20vbW9kLnJz) | `80.00% <100.00%> (ΓΈ)` | | | [serde-encrypt/src/random.rs](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani#diff-c2VyZGUtZW5jcnlwdC9zcmMvcmFuZG9tLnJz) | `90.00% <100.00%> (ΓΈ)` | | | [serde-encrypt/src/shared\_key.rs](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani#diff-c2VyZGUtZW5jcnlwdC9zcmMvc2hhcmVkX2tleS5ycw==) | `91.17% <100.00%> (+0.55%)` | :arrow_up: | ... and [2 files with indirect coverage changes](https://app.codecov.io/gh/laysakura/serde-encrypt/pull/115/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Sho+Nakatani)

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

utkarshgupta137 commented 8 months ago

@laysakura ping

jonasg-adv commented 6 months ago

@laysakura ping