[chore] update deps (#932)

Author: joyqvq

Cargo.lock

@@ -26,15 +26,14 @@ ignore = [
     # This codebase only uses RSA for signature verification with public keys,
     # so this vulnerability does not apply. No patched version exists yet.
     "RUSTSEC-2023-0071",
-    # allow unmaintained proc-macro-error used in transitive dependencies (also in Sui)
-    "RUSTSEC-2024-0370",
-    # allow unmaintained instant crate used in transitive dependencies (backoff, cached, fastrand, parking_lot_*, also in Sui)
-    "RUSTSEC-2024-0384",
-    # allow outdated 'idna' until passkey-client crate is able to update (also in Sui)
-    "RUSTSEC-2024-0421",
-    # allow unmaintained derivative crate used in transitive dependencies (paste, ark-*, also in Sui)
+    # Unmaintained derivative crate used by ark-crypto-primitives v0.4.0
     "RUSTSEC-2024-0388",
-    "RUSTSEC-2024-0436"
+    # Unmaintained paste crate used by ark dependencies
+    "RUSTSEC-2024-0436",
+    # tracing-subscriber ANSI escape vulnerability from ark-relations 0.4.0
+    "RUSTSEC-2025-0055",
+    # Unmaintained bincode (direct dependency, no safe upgrade available)
+    "RUSTSEC-2025-0141"
 ]
 # Threshold for security vulnerabilities, any vulnerability with a CVSS score
 # lower than the range specified will be ignored. Note that ignored advisories
@@ -62,12 +61,11 @@ allow = [
     "MPL-2.0",
     "ISC",
     "CC0-1.0",
-    "0BSD",
-    "LicenseRef-ring",
     "Unlicense",
     "BSL-1.0",
-    "Unicode-DFS-2016",
     "Unicode-3.0",
+    "Zlib",
+    "CDLA-Permissive-2.0",
     #"Apache-2.0 WITH LLVM-exception",
 ]
 # The confidence threshold for detecting a license from license text.

deny.toml

@@ -68,14 +68,14 @@ fn execute(cmd: Command) -> Result<String, std::io::Error> {
     match cmd {
         Command::Keygen => {
             let keypair = ECVRFKeyPair::generate(&mut thread_rng());
-            let sk_string =
-                hex::encode(bcs::to_bytes(&keypair.sk).map_err(|_| {
-                    Error::new(ErrorKind::Other, "Failed to serialize secret key.")
-                })?);
-            let pk_string =
-                hex::encode(bcs::to_bytes(&keypair.pk).map_err(|_| {
-                    Error::new(ErrorKind::Other, "Failed to serialize public key.")
-                })?);
+            let sk_string = hex::encode(
+                bcs::to_bytes(&keypair.sk)
+                    .map_err(|_| Error::other("Failed to serialize secret key."))?,
+            );
+            let pk_string = hex::encode(
+                bcs::to_bytes(&keypair.pk)
+                    .map_err(|_| Error::other("Failed to serialize public key."))?,
+            );
 
             let mut result = "Secret key: ".to_string();
             result.push_str(&sk_string);
@@ -135,7 +135,7 @@ fn execute(cmd: Command) -> Result<String, std::io::Error> {
             {
                 return Ok("Proof verified correctly!".to_string());
             }
-            Err(Error::new(ErrorKind::Other, "Proof is not correct."))
+            Err(Error::other("Proof is not correct."))
         }
     }
 }

fastcrypto-cli/src/ecvrf.rs

@@ -19,10 +19,7 @@ use fastcrypto::{
 };
 use rand::rngs::StdRng;
 use rand::SeedableRng;
-use std::{
-    io::{Error, ErrorKind},
-    str::FromStr,
-};
+use std::{io::Error, str::FromStr};
 #[derive(Parser)]
 #[command(name = "sig-cli")]
 #[command(about = "Sign or verify a signature using a signature scheme", long_about = None)]
@@ -69,7 +66,7 @@ impl FromStr for SignatureScheme {
             "secp256r1-rec" => Ok(SignatureScheme::Secp256r1Recoverable),
             "bls12381-minsig" => Ok(SignatureScheme::BLS12381MinSig),
             "bls12381-minpk" => Ok(SignatureScheme::BLS12381MinPk),
-            _ => Err(Error::new(ErrorKind::Other, "Invalid signature scheme.")),
+            _ => Err(Error::other("Invalid signature scheme.")),
         }
     }
 }

fastcrypto-cli/src/sigs_cli.rs

@@ -218,7 +218,7 @@ fn execute(cmd: Command) -> Result<String, std::io::Error> {
                     result.push_str(&msg);
                     Ok(result)
                 }
-                None => Err(Error::new(ErrorKind::Other, "Decryption failed.")),
+                None => Err(Error::other("Decryption failed.")),
             }
         }
         Command::Verify(arguments) => {

fastcrypto-cli/src/tlock.rs

@@ -126,7 +126,7 @@ fn execute(cmd: Command) -> Result<String, Error> {
             let vdf = DefaultVDF::new(DISCRIMINANT_3072.clone(), arguments.iterations);
             let (output, proof) = vdf
                 .evaluate(&g)
-                .map_err(|_| Error::new(ErrorKind::Other, "VDF evaluation failed"))?;
+                .map_err(|_| Error::other("VDF evaluation failed"))?;
 
             let output_string = hex::encode(bcs::to_bytes(&output).unwrap());
             let proof_string = hex::encode(bcs::to_bytes(&proof).unwrap());

fastcrypto-cli/src/vdf.rs

@@ -25,7 +25,6 @@ use zeroize::Zeroize;
 
 /// Generics below use `G: GroupElement' for the group of the VSS public key, and `EG: GroupElement'
 /// for the group of the ECIES public key.
-
 /// Party in the DKG protocol.
 #[derive(Clone, PartialEq, Eq, Serialize, Deserialize)]
 pub struct Party<G: GroupElement, EG: GroupElement>
@@ -161,7 +160,7 @@ where
 {
     /// 1. Create a new ECIES private key and send the public key to all parties.
     /// 2. After *all* parties have sent their ECIES public keys, create the (same) set of nodes.
-
+    ///
     /// 3. Create a new Party instance with the ECIES private key and the set of nodes.
     pub fn new<R: AllowedRng>(
         enc_sk: ecies_v1::PrivateKey<EG>,
@@ -360,7 +359,7 @@ where
     ///
     ///    We split this function into two parts: process_message and merge, so that the caller can
     ///    process messages concurrently and then merge the results.
-
+    ///
     ///    [process_message] processes a message and returns an intermediate object ProcessedMessage.
     ///
     ///    Returns error InvalidMessage if the message is invalid and should be ignored (note that we

fastcrypto-tbls/src/dkg_v1.rs

@@ -8,7 +8,6 @@ use fastcrypto::traits::AllowedRng;
 use std::num::NonZeroU16;
 
 /// Helper functions for checking relations between scalars and group elements.
-
 fn dot<S: Scalar>(v1: &[S], v2: &[S]) -> S {
     assert_eq!(v1.len(), v2.len());
     v1.iter()

fastcrypto-tbls/src/dl_verification.rs

@@ -18,7 +18,6 @@ use std::num::NonZeroU16;
 use std::ops::{Add, AddAssign, Div, Index, Mul, MulAssign, SubAssign};
 
 /// Types
-
 pub type Eval<A> = IndexedValue<A>;
 
 /// A polynomial that is using a scalar for the variable x and a generic
@@ -30,7 +29,6 @@ pub type PrivatePoly<C> = Poly<<C as GroupElement>::ScalarType>;
 pub type PublicPoly<C> = Poly<C>;
 
 /// Vector related operations.
-
 impl<C: GroupElement> Poly<C> {
     /// Returns an upper bound for the degree of the polynomial.
     /// The returned number is equal to the size of the underlying coefficient vector - 1,
@@ -116,7 +114,6 @@ impl<C: GroupElement> SubAssign<Poly<C>> for Poly<C> {
 }
 
 /// GroupElement operations.
-
 impl<C: GroupElement> Poly<C> {
     /// Returns a polynomial with the zero element.
     pub fn zero() -> Self {
@@ -326,7 +323,6 @@ impl<C: GroupElement> Poly<C> {
 }
 
 /// Scalar operations.
-
 impl<C: Scalar> Poly<C> {
     /// Returns a new polynomial of the given degree where each coefficients is
     /// sampled at random from the given RNG.
@@ -691,10 +687,7 @@ impl<C: GroupElement> Iterator for PolynomialEvaluator<C> {
         if self.first {
             self.first = false;
         } else {
-            self.index = match self.index.checked_add(self.step.get()) {
-                Some(new_index) => new_index,
-                None => return None,
-            };
+            self.index = self.index.checked_add(self.step.get())?;
             Self::iterate_state(&mut self.state);
         }
         Some(Eval {

fastcrypto-tbls/src/polynomial.rs

@@ -147,12 +147,12 @@ fn test_dkg_e2e_5_parties_min_weight_2_threshold_3() {
         MultiRecipientEncryption::encrypt(&pk_and_msgs, &ro.extend("encs 1"), &mut thread_rng());
     // d2 and d3 are ignored here (emulating slow parties).
 
-    let all_messages = vec![msg0.clone(), msg1, msg0.clone(), msg4.clone(), msg5.clone()]; // duplicates should be ignored
+    let all_messages = [msg0.clone(), msg1, msg0.clone(), msg4.clone(), msg5.clone()]; // duplicates should be ignored
 
     // expect failure - merge() requires t messages (even if some are duplicated)
     let proc0 = d0.process_message(msg0.clone(), &mut thread_rng()).unwrap();
     assert_eq!(
-        d0.merge(&[proc0.clone()]).err(),
+        d0.merge(std::slice::from_ref(&proc0)).err(),
         Some(FastCryptoError::NotEnoughInputs)
     );
     assert_eq!(
@@ -282,7 +282,7 @@ fn test_dkg_e2e_5_parties_min_weight_2_threshold_3() {
     S::partial_verify(&o3.vss_pk, &MSG, &sig30).unwrap();
     S::partial_verify(&o3.vss_pk, &MSG, &sig31).unwrap();
 
-    let sigs = vec![sig00, sig30, sig31];
+    let sigs = [sig00, sig30, sig31];
     let sig = S::aggregate(d0.t(), sigs.iter()).unwrap();
     S::verify(o0.vss_pk.c0(), &MSG, &sig).unwrap();
 }
@@ -520,7 +520,7 @@ fn test_test_process_confirmations() {
     msg3.encrypted_shares =
         MultiRecipientEncryption::encrypt(&pk_and_msgs, &ro.extend("encs 3"), &mut thread_rng());
 
-    let all_messages = vec![msg0, msg1, msg3];
+    let all_messages = [msg0, msg1, msg3];
 
     let proc_msg0 = &all_messages
         .iter()
@@ -721,7 +721,7 @@ fn test_serialized_message_regression() {
         &mut rng,
     );
 
-    let all_messages = vec![msg0.clone(), msg1, msg3];
+    let all_messages = [msg0.clone(), msg1, msg3];
 
     let proc_msg0 = &all_messages
         .iter()
@@ -812,7 +812,7 @@ fn test_e2e_dkg_and_key_rotation() {
         nizk: d2.nizk_pop_of_secret(&mut thread_rng()),
     };
 
-    let all_messages = vec![msg0, msg1, msg2]; // duplicates should be ignored
+    let all_messages = [msg0, msg1, msg2]; // duplicates should be ignored
 
     // merge() should succeed and ignore duplicates and include 1 complaint
     let proc_msg0 = &all_messages
@@ -879,7 +879,7 @@ fn test_e2e_dkg_and_key_rotation() {
     S::partial_verify(&o0.vss_pk, &MSG, &sig1).unwrap();
     S::partial_verify(&o0.vss_pk, &MSG, &sig2).unwrap();
 
-    let sigs = vec![sig0, sig1, sig2];
+    let sigs = [sig0, sig1, sig2];
     let sig = S::aggregate(d0.t(), sigs.iter()).unwrap();
     S::verify(o0.vss_pk.c0(), &MSG, &sig).unwrap();
 
@@ -934,7 +934,7 @@ fn test_e2e_dkg_and_key_rotation() {
         o0.vss_pk.eval(ShareIndex::new(1).unwrap()).value,
     ];
 
-    let all_messages = vec![msg0, msg1];
+    let all_messages = [msg0, msg1];
 
     // merge() should succeed and ignore duplicates and include 1 complaint
     let proc_msg0 = &all_messages
@@ -1013,7 +1013,7 @@ fn test_e2e_dkg_and_key_rotation() {
     S::partial_verify(&no0.vss_pk, &MSG, &sig1).unwrap();
     S::partial_verify(&no0.vss_pk, &MSG, &sig2).unwrap();
 
-    let sigs = vec![sig0, sig1, sig2];
+    let sigs = [sig0, sig1, sig2];
     let sig = S::aggregate(nd0.t(), sigs.iter()).unwrap();
     S::verify(o0.vss_pk.c0(), &MSG, &sig).unwrap();
 }