fix(servo): gate vulnerable RSA private operations

2026-07-10 01:06:48 -04:00
parent 670f7abe60
commit e085174b89
67 changed files with 10535 additions and 21 deletions
@@ -0,0 +1,255 @@
+# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
+#
+# When uploading crates to the registry Cargo will automatically
+# "normalize" Cargo.toml files for maximal compatibility
+# with all versions of Cargo and also rewrite `path` dependencies
+# to registry (e.g., crates.io) dependencies.
+#
+# If you are reading this file be aware that the original Cargo.toml
+# will likely look very different (and much more reasonable).
+# See Cargo.toml.orig for the original contents.
+
+[package]
+edition = "2021"
+rust-version = "1.85"
+name = "rsa"
+version = "0.10.0-rc.18"
+authors = [
+    "RustCrypto Developers",
+    "dignifiedquire <dignifiedquire@gmail.com>",
+]
+build = false
+exclude = [
+    "marvin_toolkit/",
+    "thirdparty/",
+]
+autolib = false
+autobins = false
+autoexamples = false
+autotests = false
+autobenches = false
+description = "Pure Rust RSA implementation"
+documentation = "https://docs.rs/rsa"
+readme = "README.md"
+keywords = [
+    "rsa",
+    "encryption",
+    "security",
+    "crypto",
+]
+categories = ["cryptography"]
+license = "MIT OR Apache-2.0"
+repository = "https://github.com/RustCrypto/RSA"
+
+[package.metadata.docs.rs]
+features = [
+    "std",
+    "serde",
+    "hazmat",
+    "sha2",
+]
+
+[features]
+default = [
+    "std",
+    "encoding",
+    "private-key-operations-disabled",
+]
+encoding = [
+    "dep:pkcs1",
+    "dep:pkcs8",
+    "dep:spki",
+]
+getrandom = [
+    "crypto-bigint/getrandom",
+    "crypto-common",
+]
+hazmat = []
+private-key-operations-disabled = []
+pkcs5 = ["pkcs8/encryption"]
+serde = [
+    "encoding",
+    "dep:serde",
+    "dep:serdect",
+    "crypto-bigint/serde",
+]
+std = [
+    "pkcs1?/std",
+    "pkcs8?/std",
+]
+
+[lib]
+name = "rsa"
+path = "src/lib.rs"
+
+[[test]]
+name = "pkcs1"
+path = "tests/pkcs1.rs"
+
+[[test]]
+name = "pkcs1v15"
+path = "tests/pkcs1v15.rs"
+
+[[test]]
+name = "pkcs8"
+path = "tests/pkcs8.rs"
+
+[[test]]
+name = "proptests"
+path = "tests/proptests.rs"
+
+[[test]]
+name = "wycheproof"
+path = "tests/wycheproof.rs"
+
+[[bench]]
+name = "key"
+path = "benches/key.rs"
+
+[dependencies.const-oid]
+version = "0.10"
+default-features = false
+
+[dependencies.crypto-bigint]
+version = "0.7"
+features = [
+    "zeroize",
+    "alloc",
+]
+default-features = false
+
+[dependencies.crypto-common]
+version = "0.2"
+features = ["getrandom"]
+optional = true
+
+[dependencies.crypto-primes]
+version = "0.7"
+default-features = false
+
+[dependencies.digest]
+version = "0.11"
+features = [
+    "alloc",
+    "oid",
+]
+default-features = false
+
+[dependencies.pkcs1]
+version = "0.8.0-rc.4"
+features = [
+    "alloc",
+    "pem",
+]
+optional = true
+default-features = false
+
+[dependencies.pkcs8]
+version = "0.11"
+features = [
+    "alloc",
+    "pem",
+]
+optional = true
+default-features = false
+
+[dependencies.rand_core]
+version = "0.10"
+default-features = false
+
+[dependencies.serde]
+version = "1.0.184"
+features = ["derive"]
+optional = true
+default-features = false
+
+[dependencies.serdect]
+version = "0.4"
+optional = true
+
+[dependencies.sha1]
+version = "0.11"
+features = ["oid"]
+optional = true
+default-features = false
+
+[dependencies.sha2]
+version = "0.11"
+features = ["oid"]
+optional = true
+default-features = false
+
+[dependencies.signature]
+version = "3.0.0-rc.10"
+features = [
+    "alloc",
+    "digest",
+    "rand_core",
+]
+default-features = false
+
+[dependencies.spki]
+version = "0.8"
+features = ["alloc"]
+optional = true
+default-features = false
+
+[dependencies.zeroize]
+version = "1.8"
+features = ["alloc"]
+
+[dev-dependencies.base64ct]
+version = "1"
+features = ["alloc"]
+
+[dev-dependencies.hex]
+version = "0.4.3"
+features = ["serde"]
+
+[dev-dependencies.hex-literal]
+version = "1"
+
+[dev-dependencies.proptest]
+version = "1"
+
+[dev-dependencies.rand]
+version = "0.10"
+features = ["chacha"]
+
+[dev-dependencies.rand_core]
+version = "0.10"
+default-features = false
+
+[dev-dependencies.rstest]
+version = "0.26.1"
+
+[dev-dependencies.serde]
+version = "1.0.184"
+features = ["derive"]
+
+[dev-dependencies.serde_json]
+version = "1.0.138"
+
+[dev-dependencies.serde_test]
+version = "1.0.89"
+
+[dev-dependencies.sha1]
+version = "0.11"
+features = ["oid"]
+default-features = false
+
+[dev-dependencies.sha2]
+version = "0.11"
+features = ["oid"]
+default-features = false
+
+[dev-dependencies.sha3]
+version = "0.11"
+features = ["oid"]
+default-features = false
+
+[profile.bench]
+debug = 2
+
+[profile.dev]
+opt-level = 2