GitLab

Bumps [github.com/multiformats/go-multiaddr](https://github.com/multiformats/go-multiaddr) from 0.1.1 to 0.1.2.
- [Release notes](https://github.com/multiformats/go-multiaddr/releases)
- [Commits](https://github.com/multiformats/go-multiaddr/compare/v0.1.1...v0.1.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

build(deps): bump go.opencensus.io from 0.22.1 to 0.22.2

Bumps [go.opencensus.io](https://github.com/census-instrumentation/opencensus-go) from 0.22.1 to 0.22.2.
- [Release notes](https://github.com/census-instrumentation/opencensus-go/releases)
- [Commits](https://github.com/census-instrumentation/opencensus-go/compare/v0.22.1...v0.22.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Merge pull request #85 from libp2p/dependabot/go_modules/github.com/multiformats/go-multihash-0.0.10

build(deps): bump github.com/multiformats/go-multihash from 0.0.8 to 0.0.10

Bumps [github.com/multiformats/go-multihash](https://github.com/multiformats/go-multihash) from 0.0.8 to 0.0.10.
- [Release notes](https://github.com/multiformats/go-multihash/releases)
- [Commits](https://github.com/multiformats/go-multihash/compare/v0.0.8...v0.0.10)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

fix(plaintext): regenerate protobuf code

feat(metrics): add function to trim idle meters

* use varints for delimiting plaintext 2.0 msgs

* lower size limit, fix comment

* go mod tidy - rm unused msgio dependency

Add API to reset bandwidth counters

chore(dep): update protobuf

Update golang.org/x/crypto to latest version

fix(key size): forbid small openssl RSA keys

Also, add a test.

There was a breaking change in the previous version that has since been
reverted.

Comment that KeyStretcher() is pending deprecation

adds ability to create keys from crypto.PrivateKey types

fix: use fallback comparison for ed25519 keys

chore(dep): update deps

* Update gogo protobuf to 1.3.0
* Update go-multiaddr to move protocol definitions _into_ go-multiaddr itself.
* update opencensus to 0.22.1
* update golang.org/x/crypto
* update sha256-simd to fix webasm build.
* update btcd (used by sekp keys)

crypto: improve key comparison logic

The check was incomplete as it didn't test the curve. This switches us to use
basicEquals (which is also constant-time).

Note: This key type isn't used by anyone in-practice (to the best of my
knowledge).

In practice, this is impossible to exploit without being able to corrupt the
private key which would allow a much simpler guess-and-check attack. However,
it's still a bad practice to compare private key material like this.

incorporates code review comments from @raulk; changes KeyPairFromKey to KeyPairFromStdKey and improves godoc.

Ensure all tests pass without weak RSA key flag