Skip to content

build(deps): bump ctutils to 0.4.5 - #15930

Merged
thomaseizinger merged 1 commit into
mainfrom
bump-ctutils
Oct 23, 2026
Merged

thomaseizinger merged 1 commit into
mainfrom
bump-ctutils

Conversation

@thomaseizinger

Copy link
Copy Markdown
Member

Versions of ctutils before 0.4.4 can generate branches in the mask generation of Choice on common platforms, and in its u128 comparisons on 32-bit targets, so they are not constant-time. This is a new advisory that fails cargo deny on every PR.

Related: RustCrypto/utils#1569

@thomaseizinger
thomaseizinger merged commit d53e3f1 into main Oct 23, 2026
172 checks passed
@thomaseizinger
thomaseizinger deleted the bump-ctutils branch October 23, 2026 06:17
@coveralls

Copy link
Copy Markdown

Coverage Status

coverage: 67.366%. first build — bump-ctutils into main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants