GitLab

chore(dep): update deps

* Update gogo protobuf to 1.3.0
* Update go-multiaddr to move protocol definitions _into_ go-multiaddr itself.
* update opencensus to 0.22.1
* update golang.org/x/crypto
* update sha256-simd to fix webasm build.
* update btcd (used by sekp keys)

crypto: improve key comparison logic

The check was incomplete as it didn't test the curve. This switches us to use
basicEquals (which is also constant-time).

Note: This key type isn't used by anyone in-practice (to the best of my
knowledge).

In practice, this is impossible to exploit without being able to corrupt the
private key which would allow a much simpler guess-and-check attack. However,
it's still a bad practice to compare private key material like this.

Ensure all tests pass without weak RSA key flag

Compare multihash `Code` to `IDENTITY` when extracting public key

This PR is a non-substantive change with the goal of making this method
`ExtractPublicKey` from a `peer.ID` clearer to the reader. This goal is
accomplished by using the full name of the identity hash code `IDENTITY` instead
of the deprecated `ID` code. This change makes its clearer to the reader that
there is a trivial way to compute the public key given the digest. Without this
change it is easy to confuse `ID` with a concept relating to peer IDs (and thus
implying this function somehow computes a hash pre-image to get the
corrresponding public key.

Return error in Emit

Remove support for blowfish

cherry-pick key optimizations from stabilize

Add freebsd/openbsd openssl support.

This also ensures we check that the types are equal, even if we're comparing
directly with `k1.Equals(k2)` instead of `KeyEquals(k1, k2)`.

uses https://github.com/spacemonkeygo/openssl/pull/126

chore: tidy

Raise minimum bits required for RSA key to 2048

* bring back plaintext 2.0.0 with new constructor

* fix deprecation comment

* rm unused context argument

* only check remote id validity if we actually have keys

* bring back msgio & simultaneous read/write

avoid duplicate randomly generated keys/peer-ids

License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>

This implements #4 from #43.

fixes #43

This reverts commit b5729d89.

Return error rather than panic in GenerateEKeyPair