feat: upgrade crypto ecosystem to latest RustCrypto stack (#1)

Upgrade all core cryptographic dependencies to their latest versions:

Dependencies:
- digest: 0.10 to 0.11
- elliptic-curve: 0.13 to 0.14
- hkdf: 0.12 to 0.13
- hmac: 0.12 to 0.13
- rand: 0.8 to 0.10
- rand_chacha: 0.3 to 0.10
- sha2: 0.10 to 0.11
- getrandom: 0.2 to 0.4 (WASM)
- ml-kem: 0.3.0-rc.0 to 0.3
- ecdsa: 0.16 to 0.17.0-rc.23
- rfc6979: 0.4 to 0.6 (now internal to ecdsa)
- p256/p384/p521: 0.13 to 0.14.0-rc.15
- curve25519-dalek: 4 to 5.0.0-rc
- ed25519-dalek: 2 to 3.0.0-rc
- cryptoki: 0.9 to 0.12
- rustyline: 17 to 18
- scrypt: 0.11 to 0.12
- voprf replaced by voprf-vx 1.0.0-pre.0

Migration changes:
- generic-array 0.14 to 1.4 with hybrid-array 0.4 interop
- ArrayLength<u8> to ArrayLength (generic-array 1.x)
- Added ConcatExt trait to disambiguate from [T]::concat
- Replaced Hmac with SimpleHmac for digest 0.11 compatibility
- Added OutputSize<H>: ArrayLength bounds throughout Hash trait
- Converted hybrid_array::Array between GenericArray at API boundaries
- Updated GroupEncoding Repr bound to hybrid_array::Array
- ECDSA sign now uses ecdsa::hazmat::sign_prehashed_rfc6979
- Removed direct rfc6979 dependency (handled by ecdsa internally)
- Replaced bincode with postcard for no_std serialization
- Re-exported hybrid_array from crate root

Other changes:
- Renamed crate to opaque-vx
- Increased MSRV to 1.89
- Added cryptography to Cargo.toml categories
- Removed Facebook-specific contributions from CONTRIBUTING.md
- Removed v3 to v4 migration test
- Removed unstable rustfmt configurations for stable compatibility

Reviewed-on: #1
Co-authored-by: UneBaguette <[email protected]>
Co-committed-by: UneBaguette <[email protected]>

Cargo.toml

@@ -1,110 +1,116 @@
 [package]
-authors = ["Kevin Lewi <[email protected]>", "François Garillot <[email protected]>"]
-categories = ["no-std"]
+authors = [
+    "VexaHub Developers",
+    "Kevin Lewi <[email protected]>",
+    "François Garillot <[email protected]>",
+]
+categories = ["no-std", "cryptography"]
 description = "An implementation of the OPAQUE password-authenticated key exchange protocol"
 edition = "2024"
 exclude = ["/src/tests/"]
-keywords = ["cryptography", "crypto", "opaque", "passwords", "authentication"]
+keywords = ["cryptography", "opaque", "passwords", "authentication", "pake"]
 license = "Apache-2.0 OR MIT"
-name = "opaque-ke"
+name = "opaque-vx"
 readme = "README.md"
-repository = "https://github.com/facebook/opaque-ke"
-rust-version = "1.87"
-version = "4.1.0-pre.2"
+repository = "https://github.com/vexahub/opaque-vx"
+rust-version = "1.90"
+version = "1.0.0-pre.0"
 
 [features]
 argon2 = ["dep:argon2"]
 curve25519 = ["dep:curve25519-dalek"]
 default = ["ristretto255", "serde"]
-ecdsa = ["dep:ecdsa", "dep:rfc6979"]
+ecdsa = ["dep:ecdsa"]
 ed25519 = ["dep:curve25519-dalek", "dep:ed25519-dalek"]
-kem = ["dep:ml-kem", "dep:rand_core_10"]
+kem = ["dep:ml-kem", "dep:rand_core"]
 ristretto255 = ["dep:curve25519-dalek", "voprf/ristretto255-ciphersuite"]
 serde = [
-  "dep:serde",
-  "curve25519-dalek?/serde",
-  "ecdsa?/serde",
-  "ed25519-dalek?/serde",
-  "elliptic-curve/serde",
-  "generic-array/serde",
-  "voprf/serde",
-  "zeroize/serde",
+    "dep:serde",
+    "curve25519-dalek?/serde",
+    "ecdsa?/serde",
+    "ed25519-dalek?/serde",
+    "elliptic-curve/serde",
+    "generic-array/serde",
+    "hybrid-array/serde",
+    "voprf/serde",
+    "zeroize/serde",
 ]
 std = ["dep:getrandom", "rand/std"]
 
 [dependencies]
-argon2 = { version = "0.5", default-features = false, features = [
-  "alloc",
+argon2 = { version = "0.6.0-rc", default-features = false, features = [
+    "alloc",
 ], optional = true }
-curve25519-dalek = { version = "4", default-features = false, features = [
-  "zeroize",
+curve25519-dalek = { version = "5.0.0-rc", default-features = false, features = [
+    "zeroize",
 ], optional = true }
-derive-where = { version = "1.4", features = ["zeroize-on-drop"] }
-digest = "0.10"
+derive-where = { version = "1.6", features = ["zeroize-on-drop"] }
+digest = { version = "0.11", features = ["zeroize"] }
 displaydoc = { version = "0.2", default-features = false }
-ecdsa = { version = "0.16", default-features = false, features = [
-  "arithmetic",
-  "hazmat",
+ecdsa = { version = "0.17.0-rc.23", default-features = false, features = [
+    "algorithm",
 ], optional = true }
-ed25519-dalek = { version = "2", default-features = false, features = [
-  "digest",
-  "hazmat",
+ed25519-dalek = { version = "3.0.0-rc", default-features = false, features = [
+    "digest",
+    "hazmat",
 ], optional = true }
-elliptic-curve = { version = "0.13", features = ["hash2curve", "sec1"] }
-generic-array = "=0.14.7" # pinned to avoid deprecation warnings
-hkdf = "0.12"
-hmac = "0.12"
-ml-kem = { version = "0.3.0-rc.0", default-features = false, features = [
-  "zeroize",
+elliptic-curve = { version = "0.14", features = ["sec1"] }
+generic-array = { version = "1.4", features = ["hybrid-array-0_4", "zeroize"] }
+hybrid-array = { version = "0.4", features = ["extra-sizes", "zeroize"] }
+hkdf = "0.13"
+hmac = "0.13"
+ml-kem = { version = "0.3", default-features = false, features = [
+    "zeroize",
 ], optional = true }
-rand = { version = "0.8", default-features = false }
-rand_core_10 = { package = "rand_core", version = "0.10", default-features = false, optional = true }
-rfc6979 = { version = "0.4", optional = true }
+rand = { version = "0.10", default-features = false }
+rand_core = { version = "0.10", default-features = false, optional = true }
 serde = { version = "1", default-features = false, features = [
-  "derive",
+    "derive",
 ], optional = true }
 subtle = { version = "2.6", default-features = false }
-voprf = { version = "0.5", default-features = false, features = ["danger"] }
-zeroize = { version = "1.8", features = ["zeroize_derive"] }
+voprf = { package = "voprf-vx", version = "1.0.0-pre.0", default-features = false, features = [
+    "danger",
+] }
+zeroize = { version = "1.9", features = ["zeroize_derive"] }
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
-getrandom = { version = "0.2", features = ["js"], optional = true }
+getrandom = { version = "0.4", features = ["wasm_js"], optional = true }
 
 [dev-dependencies]
 anyhow = "1"
-bincode = "1"
-chacha20poly1305 = "0.10"
+bincode-next = { version = "3", features = ["serde", "alloc"] }
+chacha20poly1305 = "0.11"
 criterion = "0.8"
-cryptoki = "0.9"
-elliptic-curve = { version = "0.13", features = ["alloc", "pkcs8"] }
+cryptoki = "0.12"
+elliptic-curve = { version = "0.14", features = ["alloc", "pkcs8"] }
+rand_core = { version = "0.10", default-features = false }
 hex = "0.4"
-opaque-ke-3 = { package = "opaque-ke", version = "=3.0.0" }
-p256 = { version = "0.13", default-features = false, features = [
-  "ecdsa",
-  "hash2curve",
-  "pkcs8",
-  "voprf",
+p256 = { version = "0.14.0-rc.15", default-features = false, features = [
+    "ecdsa",
+    "hash2curve",
+    "pkcs8",
+    "oprf",
 ] }
-p384 = { version = "0.13", default-features = false, features = [
-  "hash2curve",
-  "pkcs8",
-  "voprf",
+p384 = { version = "0.14.0-rc.15", default-features = false, features = [
+    "hash2curve",
+    "pkcs8",
+    "oprf",
 ] }
-p521 = { version = "0.13.3", default-features = false, features = [
-  "hash2curve",
-  "pkcs8",
-  "voprf",
+p521 = { version = "0.14.0-rc.15", default-features = false, features = [
+    "hash2curve",
+    "pkcs8",
+    "oprf",
 ] }
-paste = "1"
+pastey = "0.2"
 proptest = "1"
-rand = "0.8"
-rand_chacha = "0.3"
+rand = "0.10"
+rand_chacha = "0.10"
 regex = "1"
-sha2 = { version = "0.10", default-features = false }
+sha2 = { version = "0.11", default-features = false }
 thiserror = "2"
 # MSRV
-rustyline = "17"
-scrypt = "0.11"
+rustyline = "18"
+scrypt = "0.12"
 serde_json = "1"
 
 [[bench]]