GitLab

* use varints for delimiting plaintext 2.0 msgs

* lower size limit, fix comment

* go mod tidy - rm unused msgio dependency

Add API to reset bandwidth counters

chore(dep): update protobuf

Update golang.org/x/crypto to latest version

fix(key size): forbid small openssl RSA keys

Also, add a test.

There was a breaking change in the previous version that has since been
reverted.

Comment that KeyStretcher() is pending deprecation

adds ability to create keys from crypto.PrivateKey types

fix: use fallback comparison for ed25519 keys

chore(dep): update deps

* Update gogo protobuf to 1.3.0
* Update go-multiaddr to move protocol definitions _into_ go-multiaddr itself.
* update opencensus to 0.22.1
* update golang.org/x/crypto
* update sha256-simd to fix webasm build.
* update btcd (used by sekp keys)

crypto: improve key comparison logic

The check was incomplete as it didn't test the curve. This switches us to use
basicEquals (which is also constant-time).

Note: This key type isn't used by anyone in-practice (to the best of my
knowledge).

In practice, this is impossible to exploit without being able to corrupt the
private key which would allow a much simpler guess-and-check attack. However,
it's still a bad practice to compare private key material like this.

incorporates code review comments from @raulk; changes KeyPairFromKey to KeyPairFromStdKey and improves godoc.

Ensure all tests pass without weak RSA key flag

Compare multihash `Code` to `IDENTITY` when extracting public key

This PR is a non-substantive change with the goal of making this method
`ExtractPublicKey` from a `peer.ID` clearer to the reader. This goal is
accomplished by using the full name of the identity hash code `IDENTITY` instead
of the deprecated `ID` code. This change makes its clearer to the reader that
there is a trivial way to compute the public key given the digest. Without this
change it is easy to confuse `ID` with a concept relating to peer IDs (and thus
implying this function somehow computes a hash pre-image to get the
corrresponding public key.

Return error in Emit

Remove support for blowfish

cherry-pick key optimizations from stabilize

Add freebsd/openbsd openssl support.