w3f / schnorrkel

Schnorr VRFs and signatures on the Ristretto group

BSD 3-Clause "New" or "Revised" License

309 stars 93 forks source link

bump curve25519-dalek to v4.1.3 #108

Open aramikm opened 3 months ago

aramikm commented 3 months ago

Description

This PR tries to bump curve25519-dalekto v4.1.3 which fixes a timing variability issue described in https://rustsec.org/advisories/RUSTSEC-2024-0344

burdges commented 3 months ago

Yeah I noticed the subtle & dalek issues, so meant to do this, but I should review the old upgrade hiccups first. We likely solved them completely, but just forgotten.