Bump our use of ed25519-dalek 2.0.0-rc3

We were not vulnerable to the "Double Public Key Signing Function Oracle Attack on `ed25519-dalek`" either way, since it was fixed at 2.0.0-rc2. See dalek-cryptography/ed25519-dalek#205 Ref: https://rustsec.org/advisories/RUSTSEC-2022-0093
humanode-network · Aug 15, 2023 · 603c64b · 603c64b
1 parent 431247a
commit 603c64b
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/crates/robonode-crypto/Cargo.toml b/crates/robonode-crypto/Cargo.toml
@@ -5,7 +5,7 @@ edition = "2021"
 publish = false
 
 [dependencies]
-ed25519-dalek = { version = "2.0.0-rc.3", default-features = false, features = ["rand_core", "zeroize"] }
+ed25519-dalek = { version = "2", default-features = false, features = ["rand_core", "zeroize"] }
 
 [dev-dependencies]
 hex-literal = "0.4.1"