martinthomson / ohttp

Rust library for encapsulating HTTP messages in a cryptographic wrapper
Apache License 2.0
22 stars 16 forks source link

Update hpke and hpke-pq to 0.11.0 #68

Closed inahga closed 2 weeks ago

inahga commented 2 weeks ago

This version of hpke moves x25519-dalek to a stable version, letting downstream users get the fix for https://rustsec.org/advisories/RUSTSEC-2024-0344.

The pinned version of hpke-pq also fixes the CI.

inahga commented 2 weeks ago

@martinthomson are you able to cut a release containing this? Absolutely no urgency for that, I have no problems pulling from git if you don't have the bandwidth for it.