From c640781bc10cfdb6d652232c492ecd7e27210b26 Mon Sep 17 00:00:00 2001 From: Alexander Wagner Date: Mon, 23 Oct 2023 15:59:18 +0200 Subject: [PATCH] ascon-hash: Add Zeroize feature (#480) Not zeroizing the state allows to recover any squeezed output. This is because the `ascon` permutations can be inversed. Hence, access to the complete state allows to perform this operation. --- ascon-hash/Cargo.toml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ascon-hash/Cargo.toml b/ascon-hash/Cargo.toml index c04583302..cb3707cc7 100644 --- a/ascon-hash/Cargo.toml +++ b/ascon-hash/Cargo.toml @@ -19,7 +19,7 @@ rust-version = "1.56" [dependencies] digest = { version = "0.10", default-features = false, features = ["core-api"] } -ascon = "0.3" +ascon = { version = "0.4", default-features = false } [dev-dependencies] spectral = { version = "0.6", default-features = false } @@ -28,6 +28,7 @@ hex = "0.4" [features] default = ["std"] std = ["digest/std"] +zeroize = ["ascon/zeroize"] # TODO: enable zeroize in the future for block-buffer v0.11 [package.metadata.docs.rs] all-features = true