Skip to content

Conversation

@tarcieri
Copy link
Member

@tarcieri tarcieri commented Nov 5, 2025

This upgrades rand_core to v0.10 prereleases and depends directly on getrandom for access to the system RNG.

It additionally bumps other crates like digest and blake2 which use the new crypto-common with an upgraded rand_core.

This required restoring some functionality in blake2 which was used by argon2: RustCrypto/hashes#754

This is currently referenced as a git branch until we decide if this is a permanent solution for argon2 or not, so as to unblock the upgrade.

@tarcieri
Copy link
Member Author

tarcieri commented Nov 5, 2025

Mostly I want to get new versions of bcrypt-pbkdf2, pbkdf2, and scrypt out here

@tarcieri tarcieri force-pushed the password-hash/v0.6.0-rc.2 branch 2 times, most recently from b282b45 to 2159cc1 Compare November 5, 2025 22:08
This upgrades `rand_core` to v0.10 prereleases and depends directly on
`getrandom` for access to the system RNG.

It additionally bumps other crates like `digest` and `blake2` which use
the new `crypto-common` with an upgraded `rand_core`.

This required restoring some functionality in `blake2` which was used by
`argon2`: RustCrypto/hashes#754

This is currently referenced as a git branch until we decide if this is
a permanent solution for `argon2` or not, so as to unblock the upgrade.
@tarcieri tarcieri force-pushed the password-hash/v0.6.0-rc.2 branch from 2159cc1 to ac580af Compare November 5, 2025 22:10
@tarcieri tarcieri merged commit a108eff into master Nov 5, 2025
64 checks passed
@tarcieri tarcieri deleted the password-hash/v0.6.0-rc.2 branch November 5, 2025 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants