Skip to content
OpenAdvisories
Unscored RUSTSEC-2024-0333

`rsa-export` is unmaintained

Published Apr 6, 2024 · Updated Apr 12, 2024 · Assigned by RUSTSEC

Description

This crate has been deprecated in favour of using the native support for exporting RSA keys into the standard PEM format.
See [docs.rs documentation].

In addition to that, the operations in this crate (arithmetic and Base64 encoding) are not done in constant-time,
potentially [exposing the user to sidechannel attacks].

[docs.rs documentation]: https://docs.rs/rsa/0.9.6/rsa/index.html#pkcs8-rsa-key-encoding
[exposing the user to sidechannel attacks]: https://arxiv.org/pdf/2108.04600.pdf

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io rsa-export >= 0.0.0-0 — RUSTSEC-2024-0333

References