OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-26 16:07:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

File unmaintained advisory for rsa-export (#1933)

Browse Source
This commit is contained in:
Aumetra Weisman
2024-04-12 18:28:59 +02:00
committed by GitHub
parent c9858c0fc6
commit 8c82846cb5
1 changed files with 25 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
crates/rsa-export/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,25 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "rsa-export"
date = "2024-04-06"
references = [
"https://crates.io/crates/rsa-export/0.3.3",
"https://gitlab.com/smallglitch/rsa-export/-/commit/e29f17170d655a6f62eca8bf1f64ef0ce5807058",
]
informational = "unmaintained"
[versions]
patched = []
```
# `rsa-export` is unmaintained
This crate has been deprecated in favour of using the native support for exporting RSA keys into the standard PEM format.
See [docs.rs documentation].
In addition to that, the operations in this crate (arithmetic and Base64 encoding) are not done in constant-time,
potentially [exposing the user to sidechannel attacks].
[docs.rs documentation]: https://docs.rs/rsa/0.9.6/rsa/index.html#pkcs8-rsa-key-encoding
[exposing the user to sidechannel attacks]: https://arxiv.org/pdf/2108.04600.pdf