ssh-key: bump elliptic curve and password hash deps; MSRV 1.65

Bumps the following dependencies:

- `bcrypt-pbkdf` v0.10
- `dsa` v0.6
- `p256` v0.13
- `p384` v0.13
- `rand_core` v0.6.4 (for `CryptoRngCore`)
- `sec1` v0.7

.github/workflows/ssh-key.yml

@@ -59,7 +59,7 @@ jobs:
     strategy:
       matrix:
         rust:
-          - 1.60.0 # MSRV
+          - 1.65.0 # MSRV
           - stable
         target:
           - thumbv7em-none-eabi
@@ -80,7 +80,7 @@ jobs:
     strategy:
       matrix:
         rust:
-          - 1.60.0 # MSRV
+          - 1.65.0 # MSRV
           - stable
     steps:
       - uses: actions/checkout@v3

.github/workflows/workspace.yml

@@ -21,7 +21,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions-rs/toolchain@v1
         with:
-          toolchain: 1.64.0
+          toolchain: 1.67.0
           components: clippy
           override: true
           profile: minimal

ssh-key/Cargo.toml

@@ -14,7 +14,7 @@ categories = ["authentication", "cryptography", "encoding", "no-std", "parser-im
 keywords = ["crypto", "certificate", "openssh", "ssh", "sshsig"]
 readme = "README.md"
 edition = "2021"
-rust-version = "1.60"
+rust-version = "1.65"
 
 [dependencies]
 encoding = { package = "ssh-encoding", version = "0.1", features = ["base64", "pem", "sha2"], path = "../ssh-encoding" }
@@ -26,15 +26,15 @@ zeroize = { version = "1", default-features = false }
 # optional dependencies
 aes = { version = "0.8", optional = true, default-features = false }
 ctr = { version = "0.9", optional = true, default-features = false }
-bcrypt-pbkdf = { version = "0.9", optional = true, default-features = false }
+bcrypt-pbkdf = { version = "0.10", optional = true, default-features = false, features = ["alloc"] }
 bigint = { package = "num-bigint-dig", version = "0.8", optional = true, default-features = false }
-dsa = { version = "0.5", optional = true, default-features = false }
+dsa = { version = "0.6", optional = true, default-features = false }
 ed25519-dalek = { version = "=2.0.0-pre.0", optional = true, default-features = false }
-p256 = { version = "0.12", optional = true, default-features = false, features = ["ecdsa"] }
-p384 = { version = "0.12", optional = true, default-features = false, features = ["ecdsa"] }
-rand_core = { version = "0.6", optional = true, default-features = false }
+p256 = { version = "0.13", optional = true, default-features = false, features = ["ecdsa"] }
+p384 = { version = "0.13", optional = true, default-features = false, features = ["ecdsa"] }
+rand_core = { version = "0.6.4", optional = true, default-features = false }
 rsa = { version = "0.8", optional = true, default-features = false }
-sec1 = { version = "0.3", optional = true, default-features = false, features = ["point"] }
+sec1 = { version = "0.7", optional = true, default-features = false, features = ["point"] }
 serde = { version = "1", optional = true }
 sha1 = { version = "0.10", optional = true, default-features = false }
 

ssh-key/README.md

@@ -79,7 +79,7 @@ functionality for a particular SSH key algorithm.
 
 ## Minimum Supported Rust Version
 
-This crate requires **Rust 1.60** at a minimum.
+This crate requires **Rust 1.65** at a minimum.
 
 We may change the MSRV in the future, but it will be accompanied by a minor
 version bump.
@@ -106,7 +106,7 @@ dual licensed as above, without any additional terms or conditions.
 [docs-image]: https://docs.rs/ssh-key/badge.svg
 [docs-link]: https://docs.rs/ssh-key/
 [license-image]: https://img.shields.io/badge/license-Apache2.0/MIT-blue.svg
-[rustc-image]: https://img.shields.io/badge/rustc-1.60+-blue.svg
+[rustc-image]: https://img.shields.io/badge/rustc-1.65+-blue.svg
 [chat-image]: https://img.shields.io/badge/zulip-join_chat-blue.svg
 [chat-link]: https://rustcrypto.zulipchat.com/#narrow/stream/346919-SSH
 [build-image]: https://github.com/RustCrypto/SSH/actions/workflows/ssh-key.yml/badge.svg

ssh-key/src/certificate.rs

@@ -208,7 +208,7 @@ impl Certificate {
     #[cfg_attr(docsrs, doc(cfg(feature = "std")))]
     pub fn read_file(path: &Path) -> Result<Self> {
         let input = fs::read_to_string(path)?;
-        Self::from_openssh(&*input)
+        Self::from_openssh(&input)
     }
 
     /// Write OpenSSH certificate to a file.