Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch from curve25519-dalek-ng to curve25519-dalek #11

Closed
wants to merge 3 commits into from
Closed

Conversation

rupansh-sekar-yral
Copy link

curve-25519-ng is unmaintained and broken on latest nightly compiler
This should be a semver compatible change

@hdevalence
Copy link
Member

We won't be switching to curve25519-dalek because the maintainer is untrustworthy.

That said, the code shouldn't be dependent on nightly behavior, so that's something to fix.

@hdevalence
Copy link
Member

Can you file an issue with a description of the problem you're experiencing when building the crate on nightly?

@rupansh-sekar-yral
Copy link
Author

rupansh-sekar-yral commented Apr 4, 2024

ah I was using a crate that depended on simd_backend for curve25519-dalek-ng, unrelated to ed25519-consensus
Though anywhere I can read more about the untrustworthy maintainer? Seems like a severe supply chain vulnerability for rust as curve25519-dalek is one of the most widely used crates in rust crypto i've seen

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants