News for hackers. Stuff that matters.

A comment on Rosenpass – formally verified post-quantum WireGuard. Parent comment

Re:Rosenpass – formally verified post-quantum WireGuard by usefulcat on Tuesday February 28, 2023 @12:11PM (#34971824)
Will that restriction also be applied transitively to all dependencies?
[ Parent | on HN ]
Re:Rosenpass – formally verified post-quantum WireGuard by hhda on Tuesday February 28, 2023 @12:31PM (#34972152)
For that, I believe you need to use cargo-geiger[0] and audit the results.

[0] - https://github.com/rust-secure-code/cargo-geiger

[ Parent | on HN ]
Re:Rosenpass – formally verified post-quantum WireGuard by majewsky on Tuesday February 28, 2023 @12:24PM (#34972054)
No. That kind of restriction cannot realistically be applied to any project above toy scale. The stdlib uses unsafe code to implement a large number of memory management primitives, because the language is (by design!) not complex enough to express every necessary feature in just safe code. Rust's intention is merely to limit the amount of unsafe code as much as possible.
[ Parent | on HN ]
Re:Rosenpass – formally verified post-quantum WireGuard by umanwizard on Wednesday March 01, 2023 @08:40AM (#34982246)
* * *
[ Parent | on HN ]