RUSTSEC-2021-0059: `aesni` has been merged into the `aes` crate

[github-actions[bot]]

aesni has been merged into the aes crate

Details
Status	unmaintained
Package	aesni
Version	0.10.0
URL	https://github.com/RustCrypto/block-ciphers/pull/200
Date	2021-04-29

Please use the aes crate going forward. The new repository location is at:

<https://github.com/RustCrypto/block-ciphers/tree/master/aes&gt;

AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation.

To prevent this fallback (and have absence of AES-NI result in an illegal instruction crash instead), continue to pass the same RUSTFLAGS which were previously required for the aesni crate to compile:

RUSTFLAGS=-Ctarget-feature=+aes,+ssse3

See advisory page for additional details.

[mellowagain]

Dependency graph for aesni 0.10.0:

• actix-web 3.3.2
  • actix-http 2.2.0
    • cookie 0.14.4
      • aes-gcm 0.8.0
        • aes 0.6.0
          • aesni 0.10.0 (affected crate)

[mellowagain]

Affected crate has been removed thanks to a dependency upgrade of the actix-family of crates in c8c53a7.