Lib.rs

These reviews are from cargo-vet. To add your review, set up cargo-vet and submit your URL to its registry.

4.1.3 — diff review from 4.1.2 only (current) safe-to-deploy, crypto-reviewed

From zcash/rust-ecosystem copy of zcash/zcash. By str4d.

• New unsafe is adding core::ptr::read_volatile calls for black box optimization barriers.
• build.rs changes are to use CARGO_CFG_TARGET_POINTER_WIDTH instead of TARGET and the platforms crate for deciding on the target pointer width.

The current version of curve25519-dalek is 4.1.3.

4.1.2 — diff review from 4.1.1 only (older version) safe-to-deploy

From zcash/rust-ecosystem copy of zcash/zcash. Audited without comment by Daira Emma Hopwood.

4.1.2 (older version) unknown

From kornelski/crev-proofs copy of git.savannah.gnu.org.

Packaged for Guix (crates-crypto)

4.0.0 (older version) ub-risk-1

From google/supply-chain copy of google/rust-crate-audits. By Benjamin Saunders.

Reviewed in CL 557134163

cargo-vet does not verify reviewers' identity. You have to fully trust the source the audits are from.

ub-risk-1 (implies ub-risk-2)

Excellent soundness.

Full description of the audit criteria can be found at https://github.com/google/rust-crate-audits/blob/main/auditing_standards.md#ub-risk-1

ub-risk-2 (implies ub-risk-3)

Implied by other criteria

Negligible unsoundness or average soundness.

Full description of the audit criteria can be found at https://github.com/google/rust-crate-audits/blob/main/auditing_standards.md#ub-risk-2

ub-risk-3 (implies ub-risk-4)

Implied by other criteria

Mild unsoundness or suboptimal soundness.

Full description of the audit criteria can be found at https://github.com/google/rust-crate-audits/blob/main/auditing_standards.md#ub-risk-3

ub-risk-4

Implied by other criteria

Extreme unsoundness.

Full description of the audit criteria can be found at https://github.com/google/rust-crate-audits/blob/main/auditing_standards.md#ub-risk-4

safe-to-deploy (implies safe-to-run)

This crate will not introduce a serious security vulnerability to production software exposed to untrusted input. More…

safe-to-run

Implied by other criteria

This crate can be compiled, run, and tested on a local workstation or in controlled automation without surprising consequences. More…

crypto-reviewed

The cryptographic code in this crate has been reviewed for correctness by a member of a designated set of cryptography experts within the project.

unknown

May have been packaged automatically without a review