deps: bump rustls 0.23.40, russh 0.60.2

Closes the open dependabot PRs #119 (russh) and #120 (rustls).

russh 0.60.2 fixes channel write ordering with pending data and excludes
SHA-1 MACs from negotiation defaults. rustls 0.23.40 brings ECH inner-name
padding fixes and FIPS-aware require_ems default.

Pulls in transitive churn from russh's pinned pre-release crypto crates
(p256/p384/p521, primefield, primeorder, rsa, spki, ecdsa, scrypt). All
217 tests still pass.
This commit is contained in:
Dave Kempe
2026-05-06 10:12:31 +10:00
parent 03c8766eb3
commit 82d9264732
Generated
+85 -69
View File
@@ -138,7 +138,7 @@ version = "1.1.5"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
dependencies = [
"windows-sys 0.61.2",
"windows-sys 0.60.2",
]
[[package]]
@@ -149,7 +149,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
dependencies = [
"anstyle",
"once_cell_polyfill",
"windows-sys 0.61.2",
"windows-sys 0.60.2",
]
[[package]]
@@ -756,9 +756,9 @@ dependencies = [
[[package]]
name = "crypto-bigint"
version = "0.7.3"
version = "0.7.0-rc.28"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "42a0d26b245348befa0c121944541476763dcc46ede886c88f9d12e1697d27c3"
checksum = "96dacf199529fb801ae62a9aafdc01b189e9504c0d1ee1512a4c16bcd8666a93"
dependencies = [
"cpubits",
"ctutils",
@@ -794,11 +794,11 @@ dependencies = [
[[package]]
name = "crypto-primes"
version = "0.7.0"
version = "0.7.0-pre.9"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "21f41f23de7d24cdbda7f0c4d9c0351f99a4ceb258ef30e5c1927af8987ffe5a"
checksum = "6081ce8b60c0e533e2bba42771b94eb6149052115f4179744d5779883dc98583"
dependencies = [
"crypto-bigint 0.7.3",
"crypto-bigint 0.7.0-rc.28",
"libm",
"rand_core 0.10.1",
]
@@ -1048,16 +1048,16 @@ dependencies = [
[[package]]
name = "ecdsa"
version = "0.17.0-rc.17"
version = "0.17.0-rc.16"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "dc4bf51f0534ed6e59a0f2f26272b64ba55c470133f8424c2adfd1c4d59d9988"
checksum = "91bbdd377139884fafcad8dc43a760a3e1e681aa26db910257fa6535b70e1829"
dependencies = [
"der 0.8.0",
"digest 0.11.2",
"elliptic-curve 0.14.0-rc.31",
"elliptic-curve 0.14.0-rc.28",
"rfc6979 0.5.0-rc.5",
"signature 3.0.0-rc.10",
"spki 0.8.0",
"spki 0.8.0-rc.4",
"zeroize",
]
@@ -1140,12 +1140,12 @@ dependencies = [
[[package]]
name = "elliptic-curve"
version = "0.14.0-rc.31"
version = "0.14.0-rc.28"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "b148a81cede8f4023248f980cffdf7611c46f2add469c6980e815b7c5b764ba5"
checksum = "bde7860544606d222fd6bd6d9f9a0773321bf78072a637e1d560a058c0031978"
dependencies = [
"base16ct 1.0.0",
"crypto-bigint 0.7.3",
"crypto-bigint 0.7.0-rc.28",
"crypto-common 0.2.1",
"digest 0.11.2",
"hkdf 0.13.0",
@@ -1186,7 +1186,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
dependencies = [
"libc",
"windows-sys 0.61.2",
"windows-sys 0.52.0",
]
[[package]]
@@ -1989,17 +1989,17 @@ checksum = "25f8a978272e3cbdf4768f7363eb1c8e1e6ba63c52a3ed05e29e222da4aec7cb"
dependencies = [
"argon2",
"bcrypt-pbkdf",
"crypto-bigint 0.7.3",
"ecdsa 0.17.0-rc.17",
"crypto-bigint 0.7.0-rc.28",
"ecdsa 0.17.0-rc.16",
"ed25519-dalek 3.0.0-pre.6",
"hex",
"hmac 0.13.0",
"num-bigint-dig",
"p256 0.14.0-rc.8",
"p384 0.14.0-rc.8",
"p521 0.14.0-rc.8",
"p256 0.14.0-rc.7",
"p384 0.14.0-rc.7",
"p521 0.14.0-rc.7",
"rand_core 0.10.1",
"rsa 0.10.0-rc.17",
"rsa 0.10.0-rc.16",
"sec1 0.8.1",
"sha1 0.11.0",
"sha2 0.11.0",
@@ -2244,9 +2244,9 @@ dependencies = [
[[package]]
name = "ml-kem"
version = "0.3.0-rc.2"
version = "0.3.0-rc.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "04437cb1a66c0b78740927b76cc61f218344b9f6ef3dd430e283274a718ef0e9"
checksum = "8198b5db27ac9773534c371751a59dc18aec8b80aa141e69abfdd1dec2e3f78c"
dependencies = [
"hybrid-array",
"kem",
@@ -2306,7 +2306,7 @@ version = "0.50.3"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
dependencies = [
"windows-sys 0.61.2",
"windows-sys 0.60.2",
]
[[package]]
@@ -2479,14 +2479,14 @@ dependencies = [
[[package]]
name = "p256"
version = "0.14.0-rc.8"
version = "0.14.0-rc.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "44f0a10fe314869359cb2901342b045f4e5a962ef9febc006f03d2a8c848fe4c"
checksum = "018bfbb86e05fd70a83e985921241035ee09fcd369c4a2c3680b389a01d2ad28"
dependencies = [
"ecdsa 0.17.0-rc.17",
"elliptic-curve 0.14.0-rc.31",
"ecdsa 0.17.0-rc.16",
"elliptic-curve 0.14.0-rc.28",
"primefield",
"primeorder 0.14.0-rc.9",
"primeorder 0.14.0-rc.7",
"sha2 0.11.0",
]
@@ -2504,15 +2504,15 @@ dependencies = [
[[package]]
name = "p384"
version = "0.14.0-rc.8"
version = "0.14.0-rc.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "b079e66810c55ab3d6ba424e056dc4aefcdb8046c8c3f3816142edbdd7af7721"
checksum = "8c91df688211f5957dbe2ab599dcbcaade8d6d3cdc15c5b350d350d7d07ce423"
dependencies = [
"ecdsa 0.17.0-rc.17",
"elliptic-curve 0.14.0-rc.31",
"ecdsa 0.17.0-rc.16",
"elliptic-curve 0.14.0-rc.28",
"fiat-crypto 0.3.0",
"primefield",
"primeorder 0.14.0-rc.9",
"primeorder 0.14.0-rc.7",
"sha2 0.11.0",
]
@@ -2532,15 +2532,15 @@ dependencies = [
[[package]]
name = "p521"
version = "0.14.0-rc.8"
version = "0.14.0-rc.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "9eecc34c4c6e6596d5271fecf90ac4f16593fa198e77282214d0c22736aa9266"
checksum = "de6cd9451de522549d36cc78a1b45a699a3d55a872e8ea0c8f0318e502d99e2c"
dependencies = [
"base16ct 1.0.0",
"ecdsa 0.17.0-rc.17",
"elliptic-curve 0.14.0-rc.31",
"ecdsa 0.17.0-rc.16",
"elliptic-curve 0.14.0-rc.28",
"primefield",
"primeorder 0.14.0-rc.9",
"primeorder 0.14.0-rc.7",
"sha2 0.11.0",
]
@@ -2695,7 +2695,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "986d2e952779af96ea048f160fd9194e1751b4faea78bcf3ceb456efe008088e"
dependencies = [
"der 0.8.0",
"spki 0.8.0",
"spki 0.8.0-rc.4",
]
[[package]]
@@ -2712,7 +2712,7 @@ dependencies = [
"rand_core 0.10.1",
"scrypt",
"sha2 0.11.0",
"spki 0.8.0",
"spki 0.8.0-rc.4",
]
[[package]]
@@ -2734,7 +2734,7 @@ dependencies = [
"der 0.8.0",
"pkcs5",
"rand_core 0.10.1",
"spki 0.8.0",
"spki 0.8.0-rc.4",
]
[[package]]
@@ -2819,11 +2819,11 @@ dependencies = [
[[package]]
name = "primefield"
version = "0.14.0-rc.9"
version = "0.14.0-rc.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "1b52e6ee42db392378a95622b463c9740631171d1efce43fa445a569c1600cb6"
checksum = "93401c13cc7ff24684571cfca9d3cf9ebabfaf3d4b7b9963ade41ec54da196b5"
dependencies = [
"crypto-bigint 0.7.3",
"crypto-bigint 0.7.0-rc.28",
"crypto-common 0.2.1",
"rand_core 0.10.1",
"rustcrypto-ff",
@@ -2842,11 +2842,11 @@ dependencies = [
[[package]]
name = "primeorder"
version = "0.14.0-rc.9"
version = "0.14.0-rc.7"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0556580e42c19833f5d232aca11a7687a503ee41f937b54f5ae1d50fc2a6a36a"
checksum = "a0c5c8a39bcd764bfedf456e8d55e115fe86dda3e0f555371849f2a41cbc9706"
dependencies = [
"elliptic-curve 0.14.0-rc.31",
"elliptic-curve 0.14.0-rc.28",
]
[[package]]
@@ -3209,12 +3209,12 @@ dependencies = [
[[package]]
name = "rsa"
version = "0.10.0-rc.17"
version = "0.10.0-rc.16"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "87ed3e93fc7e473e464b9726f4759659e72bc8665e4b8ea227547024f416d905"
checksum = "6fb9fd8c1edd9e6a2693623baf0fe77ff05ce022a5d7746900ffc38a15c233de"
dependencies = [
"const-oid 0.10.2",
"crypto-bigint 0.7.3",
"crypto-bigint 0.7.0-rc.28",
"crypto-primes",
"digest 0.11.2",
"pkcs1 0.8.0-rc.4",
@@ -3222,7 +3222,7 @@ dependencies = [
"rand_core 0.10.1",
"sha2 0.11.0",
"signature 3.0.0-rc.10",
"spki 0.8.0",
"spki 0.8.0-rc.4",
"zeroize",
]
@@ -3253,61 +3253,77 @@ dependencies = [
[[package]]
name = "russh"
version = "0.60.1"
version = "0.60.2"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "d937f3f4a79bffd67fc12fd437785effdfc8b94edc89ab90392f9ac9e11cc9fc"
checksum = "9c9e358980fe9b079b99da387117864ee6f0a3fd02f39e5b5fde6af9c2895374"
dependencies = [
"aead 0.6.0-rc.10",
"aes 0.8.4",
"aes 0.9.0",
"aes-gcm 0.11.0-rc.3",
"aws-lc-rs",
"bitflags",
"block-padding 0.3.3",
"byteorder",
"bytes",
"cbc 0.1.2",
"cbc 0.2.0",
"cipher 0.5.1",
"crypto-bigint 0.7.3",
"crypto-bigint 0.7.0-rc.28",
"ctr 0.10.0",
"ctr 0.9.2",
"curve25519-dalek 5.0.0-pre.6",
"data-encoding",
"delegate",
"der 0.8.0",
"digest 0.10.7",
"ecdsa 0.17.0-rc.17",
"ecdsa 0.17.0-rc.16",
"ed25519-dalek 3.0.0-pre.6",
"elliptic-curve 0.14.0-rc.31",
"elliptic-curve 0.14.0-rc.28",
"enum_dispatch",
"flate2",
"futures",
"generic-array 1.3.5",
"getrandom 0.2.17",
"ghash 0.6.0",
"hex-literal",
"hkdf 0.13.0",
"hmac 0.12.1",
"hmac 0.13.0",
"inout 0.1.4",
"internal-russh-forked-ssh-key",
"internal-russh-num-bigint",
"keccak",
"log",
"md5",
"ml-kem",
"module-lattice",
"p256 0.14.0-rc.8",
"p384 0.14.0-rc.8",
"p521 0.14.0-rc.8",
"num-bigint",
"p256 0.14.0-rc.7",
"p384 0.14.0-rc.7",
"p521 0.14.0-rc.7",
"pageant",
"pbkdf2 0.12.2",
"pbkdf2 0.13.0",
"pkcs1 0.8.0-rc.4",
"pkcs5",
"pkcs8 0.11.0-rc.11",
"polyval 0.7.1",
"rand 0.10.1",
"rand_core 0.10.1",
"rsa 0.10.0-rc.17",
"rsa 0.10.0-rc.16",
"russh-cryptovec",
"russh-util",
"salsa20",
"scrypt",
"sec1 0.8.1",
"sha1 0.10.6",
"sha1 0.11.0",
"sha2 0.10.9",
"sha2 0.11.0",
"sha3",
"signature 3.0.0-rc.10",
"spki 0.8.0",
"spki 0.8.0-rc.4",
"ssh-encoding",
"subtle",
"thiserror 2.0.18",
@@ -3439,9 +3455,9 @@ dependencies = [
[[package]]
name = "rustls"
version = "0.23.39"
version = "0.23.40"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7c2c118cb077cca2822033836dfb1b975355dfb784b5e8da48f7b6c5db74e60e"
checksum = "ef86cd5876211988985292b91c96a8f2d298df24e75989a43a3c73f2d4d8168b"
dependencies = [
"aws-lc-rs",
"log",
@@ -3559,9 +3575,9 @@ checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
[[package]]
name = "scrypt"
version = "0.12.0-rc.10"
version = "0.12.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "e03ed5b54ed5fcc8e016cd94301416bc2c01c05c87a6742b97468337c8804598"
checksum = "d87af57419b594aa23fa95f09f0e06d80d84ba01c26148c43844cad6ff4485f0"
dependencies = [
"cfg-if",
"pbkdf2 0.13.0",
@@ -3896,7 +3912,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
dependencies = [
"libc",
"windows-sys 0.61.2",
"windows-sys 0.60.2",
]
[[package]]
@@ -3926,9 +3942,9 @@ dependencies = [
[[package]]
name = "spki"
version = "0.8.0"
version = "0.8.0-rc.4"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "1d9efca8738c78ee9484207732f728b1ef517bbb1833d6fc0879ca898a522f6f"
checksum = "8baeff88f34ed0691978ec34440140e1572b68c7dd4a495fd14a3dc1944daa80"
dependencies = [
"base64ct",
"der 0.8.0",