Commit graph

1088 commits

Author SHA1 Message Date
str4d
b6b1eceae6
Merge pull request #376 from str4d/release-0.9.1
Release 0.9.1
2023-03-24 13:34:38 +00:00
Jack Grigg
a291796b5b v0.9.1 2023-03-24 22:18:30 +09:00
Jack Grigg
89e699d387 cargo update 2023-03-24 22:14:24 +09:00
str4d
57297339f9
Merge pull request #375 from str4d/fix-cargo-vet
Fix `cargo-vet`
2023-03-24 12:49:42 +00:00
Jack Grigg
6cab7c1445 Update cargo-vet audits 2023-03-24 21:29:19 +09:00
Jack Grigg
ffc91d13bb Fix cargo-vet config file 2023-03-24 21:12:18 +09:00
str4d
15eb8db038
Merge pull request #373 from str4d/dependabot/github_actions/actions/setup-go-4
build(deps): bump actions/setup-go from 3 to 4
2023-03-24 11:50:22 +00:00
dependabot[bot]
d3869aba23
build(deps): bump actions/setup-go from 3 to 4
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-16 03:58:23 +00:00
str4d
b2bda70ef3
Merge pull request #369 from str4d/dependabot/github_actions/svenstaro/upload-release-action-2.5.0
build(deps): bump svenstaro/upload-release-action from 2.3.0 to 2.5.0
2023-03-07 18:09:29 +00:00
str4d
7cfb7692af
Merge pull request #372 from str4d/update-deps-0.9.1
Update dependencies for 0.9.1
2023-03-07 15:30:34 +00:00
Jack Grigg
0e60ea7696 cargo update 2023-03-07 15:04:19 +00:00
Jack Grigg
e8f095f687 Import more audits 2023-03-07 15:03:34 +00:00
Jack Grigg
23d2d0934e Prune audits 2023-03-07 15:02:13 +00:00
Jack Grigg
ce3a0f3705 Replace Firefox audits with aggregated Mozilla audits 2023-03-07 15:02:13 +00:00
str4d
ecb5844e73
Merge pull request #371 from str4d/370-encrypted-ssh-aes256-gcm
ssh: Support `aes256-gcm@openssh.com` ciphers for encrypted keys
2023-03-07 15:01:57 +00:00
Jack Grigg
b92b6070c2 ssh: Fix parsing of OpenSSH private key format
Support for AEAD ciphers was done in a way that means the `string` that
previously contained the entire ciphertext now only contains the
unauthenticated part of the ciphertext, and the tag is just appended
afterwards. This means the encryption header needs to be interpreted in
order to parse the full private key format.
2023-03-07 03:56:49 +00:00
Jack Grigg
37c6b697ba ssh: Support aes256-gcm@openssh.com ciphers for encrypted keys
Closes str4d/rage#370.
2023-03-07 03:51:42 +00:00
Jack Grigg
f3f93f80a3 ssh: Add aes256-gcm@openssh.com cipher to test cases 2023-03-07 03:44:11 +00:00
Jack Grigg
7c1d82b1c4 ssh: Extract common key material derivation logic for encrypted keys 2023-03-07 03:41:01 +00:00
Jack Grigg
722875ee56 ssh: Use associated constants for key and IV sizes 2023-03-07 03:40:41 +00:00
Jack Grigg
ac6138d82b ssh: Add test cases for encrypted keys 2023-03-07 03:39:35 +00:00
dependabot[bot]
7f552f5cc7
build(deps): bump svenstaro/upload-release-action from 2.3.0 to 2.5.0
Bumps [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action) from 2.3.0 to 2.5.0.
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/svenstaro/upload-release-action/compare/2.3.0...2.5.0)

---
updated-dependencies:
- dependency-name: svenstaro/upload-release-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-02-22 03:19:33 +00:00
str4d
3ff541a0a5
Merge pull request #352 from str4d/zcash-audits
Migrate to new home of Zcash crate audits
2022-10-28 05:16:34 +01:00
Jack Grigg
0d37905a88 Migrate to new home of Zcash crate audits 2022-10-28 03:47:31 +00:00
Jack Grigg
7f73efa295 Update Homebrew formula to v0.9.0 2022-10-27 05:02:13 +00:00
str4d
ff4b02001e
Merge pull request #351 from str4d/release-0.9.0
Release 0.9.0
2022-10-27 05:53:16 +01:00
Jack Grigg
ec025bea2a v0.9.0 2022-10-27 02:28:43 +00:00
str4d
9d33fbb931
Merge pull request #261 from dwhjames/use-pkcs1-crate
use pkcs1 crate to parse RSAPrivateKey ASN.1 object
2022-10-26 11:33:17 +01:00
Daniel James
32ad6844e8 use pkcs1 crate to parse RSAPrivateKey ASN.1 object
following from review conversation:
https://github.com/str4d/rage/pull/260#issuecomment-917665743

references:

- [RFC 8017](https://tools.ietf.org/html/rfc8017#appendix-A.1.2)
- [rsa::pkcs1](https://docs.rs/rsa/0.5.0/rsa/#pkcs1-rsa-key-encoding)
2022-10-26 10:21:08 +00:00
str4d
e6f0ed69a4
Merge pull request #350 from str4d/cargo-vet
Start using `cargo vet` to audit dependencies
2022-10-26 11:13:13 +01:00
Jack Grigg
4b8f9e84ad qa: Add workflow that runs cargo vet --locked 2022-10-26 09:44:57 +00:00
Jack Grigg
e09d37c421 qa: Import cargo vet audits from Firefox and zcashd 2022-10-26 09:44:57 +00:00
Jack Grigg
7fe704139f qa: Add crypto-reviewed criteria or cargo vet 2022-10-26 09:44:57 +00:00
Jack Grigg
f9be4a85a6 qa: cargo vet init 2022-10-26 09:44:43 +00:00
str4d
c992e001d4
Merge pull request #349 from str4d/msrv-1.59
Set MSRV to 1.59 and update dependencies
2022-10-26 10:11:00 +01:00
Jack Grigg
de96ae7153 Fix clippy lints 2022-10-26 08:58:13 +00:00
Jack Grigg
490fca7167 age: Make cipher dependency optional 2022-10-26 08:19:49 +00:00
Jack Grigg
80057188e9 age: rsa 0.7 2022-10-26 08:19:49 +00:00
Jack Grigg
596877debb age: bcrypt-pbkdf 0.9 and scrypt 0.10 2022-10-26 08:19:49 +00:00
Jack Grigg
c09af4f3b8 cargo update 2022-10-26 08:08:00 +00:00
Jack Grigg
d2bb92915a Bump MSRV to 1.59.0
Closes str4d/rage#348.
2022-10-26 08:05:12 +00:00
str4d
a0ab6914e4
Merge pull request #347 from str4d/ci-go-1.19
CI: Switch to Go 1.19 for interop tests
2022-10-26 08:10:38 +01:00
Jack Grigg
e189c9957a CI: Switch to Go 1.19 for interop tests 2022-10-26 06:56:33 +00:00
str4d
3cccede980
Merge pull request #346 from str4d/fix-send-encryptor
Fix codebase to allow Encryptor to implement Send
2022-10-26 07:54:18 +01:00
Jack Grigg
9ccbf3c763 Fix codebase to allow Encryptor to implement Send
Fixes str4d/rage#344.
2022-10-26 06:46:05 +00:00
str4d
20c9542cd6
Merge pull request #343 from str4d/dependabot/github_actions/codecov/codecov-action-3.1.1
build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1
2022-10-26 07:24:45 +01:00
str4d
99c74b7a1b
Merge pull request #344 from alexgartrell/send-encryptor
Ensure Encryptor implements trait Send
2022-10-26 07:22:48 +01:00
Alex Gartrell
9c3a8dc5a4 Ensure Encryptor implements trait Send
By adding the Send trait as a requirement to the recipients vec, we
gain the Send trait on Encryptor. This is useful for other async
frameworks that require Send across await's.
2022-09-21 22:04:07 -07:00
dependabot[bot]
0ca71fc2af
build(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-20 03:20:34 +00:00
str4d
59c9997f78
Merge pull request #342 from str4d/330-prevent-encryption-to-no-recipients
Prevent `age::Encryptor` from being constructed with no recipients
2022-09-11 02:55:38 +01:00