bump rust-openssl dep and update EcPoint::mul_generator to mul_generator2 (#14789)

reaperhulk · web-flow · commit 2e73ca448eaf · 2026-05-03T20:41:13.000-04:00
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -27,8 +27,8 @@ cc = "1.2.61"
 cfg-if = "1"
 foreign-types = "0.3"
 foreign-types-shared = "0.1"
-openssl = "0.10.77"
-openssl-sys = "0.9.111"
+openssl = "0.10.79"
+openssl-sys = "0.9.115"
 pem = { version = "3", default-features = false }
 pyo3 = { version = "0.28", features = ["abi3"] }
 pyo3-build-config = { version = "0.28" }
diff --git a/src/rust/cryptography-key-parsing/src/ec.rs b/src/rust/cryptography-key-parsing/src/ec.rs
@@ -160,7 +160,7 @@ pub fn parse_pkcs1_private_key(
     } else {
         let mut public_point = openssl::ec::EcPoint::new(&group)?;
         public_point
-            .mul_generator(&group, &private_number, &bn_ctx)
+            .mul_generator2(&group, &private_number, &mut bn_ctx)
             .map_err(|_| crate::KeyParsingError::InvalidKey)?;
         public_point
     };
diff --git a/src/rust/src/backend/ec.rs b/src/rust/src/backend/ec.rs
@@ -155,8 +155,8 @@ fn derive_private_key(
     let private_value = utils::py_int_to_bn(py, py_private_value)?;
 
     let mut point = openssl::ec::EcPoint::new(&curve)?;
-    let bn_ctx = openssl::bn::BigNumContext::new()?;
-    point.mul_generator(&curve, &private_value, &bn_ctx)?;
+    let mut bn_ctx = openssl::bn::BigNumContext::new()?;
+    point.mul_generator2(&curve, &private_value, &mut bn_ctx)?;
     let ec = openssl::ec::EcKey::from_private_components(&curve, &private_value, &point)
         .map_err(|_| pyo3::exceptions::PyValueError::new_err("Invalid EC key"))?;
     ec.check_key().map_err(|_| {
@@ -555,7 +555,7 @@ impl EllipticCurvePrivateNumbers {
 
         let mut bn_ctx = openssl::bn::BigNumContext::new()?;
         let mut expected_pub = openssl::ec::EcPoint::new(&curve)?;
-        expected_pub.mul_generator(&curve, &private_value, &bn_ctx)?;
+        expected_pub.mul_generator2(&curve, &private_value, &mut bn_ctx)?;
         if !expected_pub.eq(&curve, public_key.public_key(), &mut bn_ctx)? {
             return Err(CryptographyError::from(
                 pyo3::exceptions::PyValueError::new_err("Invalid EC key."),
