chore: update RustCrypto deps to stable #8

Merged

breakingbread merged 2 commits from renovate/rust-deps into master 2026-07-08 23:43:23 +02:00

Conversation 0 Commits 2 Files Changed 2

+34 -34

vxrenovate commented 2026-07-07 02:04:14 +02:00

Member

Copy Link

Copy Source

This PR contains the following updates:

Package	Type	Update	Change
curve25519-dalek (source)	dependencies	patch	5.0.0-rc.1 → 5.0.0
ed25519-dalek (source)	dependencies	patch	3.0.0-rc.1 → 3.0.0
p256 (source)	dev-dependencies	patch	0.14.0-rc.15 → 0.14.0
p384 (source)	dev-dependencies	patch	0.14.0-rc.15 → 0.14.0

---

Release Notes

dalek-cryptography/curve25519-dalek (curve25519-dalek)

v5.0.0

Breaking Changes

• Update edition to 2024
• Update the MSRV from 1.60 to 1.85
• Remove group-bits feature due to soundness issues with underlying trait (#​909)
• Re-export rand_core (#​908)
• Rename Scalar::batch_invert -> Scalar::invert_batch for consistency. Also make it no-alloc. (#​789)
• Remove deprecated functions FieldElement::as_bytes() and EdwardsPoint::nonspec_map_to_curve() (#​778)
• Upgrade rand_core dependency to v0.10.0
• Upgrade digest and sha2 deps

Other Changes

• Perf: Use maximum available NAF window size in VartimePrecomputedStraus (#​848)
• Perf: Skip checking 8 candidate points in RistrettoPoint::lizard_decode (#​882)
• Add Lizard bytes-to-point injection for Ristretto. Gated under lizard feature. (#​826)
• Add an allocating batch inversion called Scalar::invert_batch_alloc (#​789)
• Add Scalar::div_by_2 (#​805)
• Add EdwardsPoint::hash_to_curve (#​786)
• Undeprecate Scalar::from_bits() (#​780)
• Use constant-time equality testing for compressed Ristretto and Edwards points, rather than autoderived equality

dalek-cryptography/curve25519-dalek (ed25519-dalek)

v3.0.0

Breaking Changes

• Update edition to 2024
• Update the MSRV from 1.60 to 1.85
• Remove std feature now that error::Error is in core
• Make signing and verifying keys use pkcs8::spki::SignatureAlgorithmIdentifier instead of DynSignatureAlgorithmIdentifier (#​779)
• Upgrade ed25519 dependency to v3.0.0
• Upgrade signature dependency to v3.0.0
• Upgrade sha2 and sha3 dependencies to v0.11
• Upgrade getrandom dependency to v0.4
• Upgrade chacha20 dependency to v0.10
• Upgrade rand_core dependency to v0.10.0

Other Changes

• Re-export rand_core (#​908)
• Add allocation-free EdwardsPoint::compress_batch (#​832)
• Add strobe-rs dependency and delete vendored STROBE impl (#​895)
• Impl MultipartSigner and MultipartVerifier for SigningKey and VerifyingKey (#​764)
• Impl KeySizeUser, TryKeyInit, and Generate for SigningKey. Also impl KeySizeUser for VerifyingKey #​733

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [curve25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) ([source](https://github.com/dalek-cryptography/curve25519-dalek/tree/HEAD/curve25519-dalek)) | dependencies | patch | `5.0.0-rc.1` → `5.0.0` | | [ed25519-dalek](https://github.com/dalek-cryptography/curve25519-dalek) ([source](https://github.com/dalek-cryptography/curve25519-dalek/tree/HEAD/ed25519-dalek)) | dependencies | patch | `3.0.0-rc.1` → `3.0.0` | | [p256](https://github.com/RustCrypto/elliptic-curves/tree/master/p256) ([source](https://github.com/RustCrypto/elliptic-curves)) | dev-dependencies | patch | `0.14.0-rc.15` → `0.14.0` | | [p384](https://github.com/RustCrypto/elliptic-curves/tree/master/p384) ([source](https://github.com/RustCrypto/elliptic-curves)) | dev-dependencies | patch | `0.14.0-rc.15` → `0.14.0` | --- ### Release Notes <details> <summary>dalek-cryptography/curve25519-dalek (curve25519-dalek)</summary> ### [`v5.0.0`](https://github.com/dalek-cryptography/curve25519-dalek/blob/HEAD/curve25519-dalek/CHANGELOG.md#500---2026-07-06) ##### Breaking Changes - Update edition to 2024 - Update the MSRV from 1.60 to 1.85 - Remove `group-bits` feature due to soundness issues with underlying trait ([#&#8203;909](https://github.com/dalek-cryptography/curve25519-dalek/pull/909)) - Re-export `rand_core` ([#&#8203;908](https://github.com/dalek-cryptography/curve25519-dalek/pull/908)) - Rename `Scalar::batch_invert` -> `Scalar::invert_batch` for consistency. Also make it no-alloc. ([#&#8203;789](https://github.com/dalek-cryptography/curve25519-dalek/pull/789)) - Remove deprecated functions `FieldElement::as_bytes()` and `EdwardsPoint::nonspec_map_to_curve()` ([#&#8203;778](https://github.com/dalek-cryptography/curve25519-dalek/pull/778)) - Upgrade `rand_core` dependency to v0.10.0 - Upgrade `digest` and `sha2` deps ##### Other Changes - Perf: Use maximum available NAF window size in `VartimePrecomputedStraus` ([#&#8203;848](https://github.com/dalek-cryptography/curve25519-dalek/pull/848)) - Perf: Skip checking 8 candidate points in `RistrettoPoint::lizard_decode` ([#&#8203;882](https://github.com/dalek-cryptography/curve25519-dalek/pull/882)) - Add Lizard bytes-to-point injection for Ristretto. Gated under `lizard` feature. ([#&#8203;826](https://github.com/dalek-cryptography/curve25519-dalek/pull/826)) - Add an allocating batch inversion called `Scalar::invert_batch_alloc` ([#&#8203;789](https://github.com/dalek-cryptography/curve25519-dalek/pull/789)) - Add `Scalar::div_by_2` ([#&#8203;805](https://github.com/dalek-cryptography/curve25519-dalek/pull/805)) - Add `EdwardsPoint::hash_to_curve` ([#&#8203;786](https://github.com/dalek-cryptography/curve25519-dalek/pull/786)) - Undeprecate `Scalar::from_bits()` ([#&#8203;780](https://github.com/dalek-cryptography/curve25519-dalek/pull/780)) - Use constant-time equality testing for compressed Ristretto and Edwards points, rather than autoderived equality </details> <details> <summary>dalek-cryptography/curve25519-dalek (ed25519-dalek)</summary> ### [`v3.0.0`](https://github.com/dalek-cryptography/curve25519-dalek/blob/HEAD/ed25519-dalek/CHANGELOG.md#300---2026-07-06) ##### Breaking Changes - Update edition to 2024 - Update the MSRV from 1.60 to 1.85 - Remove `std` feature now that `error::Error` is in `core` - Make signing and verifying keys use `pkcs8::spki::SignatureAlgorithmIdentifier` instead of `DynSignatureAlgorithmIdentifier` ([#&#8203;779](https://github.com/dalek-cryptography/curve25519-dalek/pull/779)) - Upgrade `ed25519` dependency to v3.0.0 - Upgrade `signature` dependency to v3.0.0 - Upgrade `sha2` and `sha3` dependencies to v0.11 - Upgrade `getrandom` dependency to v0.4 - Upgrade `chacha20` dependency to v0.10 - Upgrade `rand_core` dependency to v0.10.0 ##### Other Changes - Re-export `rand_core` ([#&#8203;908](https://github.com/dalek-cryptography/curve25519-dalek/pull/908)) - Add allocation-free `EdwardsPoint::compress_batch` ([#&#8203;832](https://github.com/dalek-cryptography/curve25519-dalek/pull/832)) - Add `strobe-rs` dependency and delete vendored STROBE impl ([#&#8203;895](https://github.com/dalek-cryptography/curve25519-dalek/pull/895)) - Impl `MultipartSigner` and `MultipartVerifier` for `SigningKey` and `VerifyingKey` ([#&#8203;764](https://github.com/dalek-cryptography/curve25519-dalek/pull/764)) - Impl `KeySizeUser`, `TryKeyInit`, and `Generate` for `SigningKey`. Also impl `KeySizeUser` for `VerifyingKey` [#&#8203;733](https://github.com/dalek-cryptography/curve25519-dalek/pull/733) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

vxrenovate added 1 commit 2026-07-07 02:04:14 +02:00

Update rust deps 246782a4f3

breakingbread added 1 commit 2026-07-08 12:32:02 +02:00

chore: update Cargo.toml e22d92df8f

breakingbread changed title from Update rust deps to chore: update RustCrypto deps to stable 2026-07-08 12:33:28 +02:00

breakingbread merged commit 0d257aaf78 into master 2026-07-08 23:43:23 +02:00

breakingbread deleted branch renovate/rust-deps 2026-07-08 23:43:24 +02:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

backend

bug

checkout

crypto

frontend

infra

later

perf

security

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

bmatx breakingbread drippyguy giteagentlebot (Gitea Bot) vxrenovate (Renovate Bot)

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: vexahub/opaque-vx#8