RUSTSEC-2021-0059 `aesni` has been merged into the `aes` crate
The aesni crate is deprecated and merged into aes; users should migrate to the aes crate for continued support and security.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2021-0059?
RUSTSEC-2021-0059 is a vulnerability in aesni, published on 29 Apr 2021.
Official description
Please use the aes crate going forward. The new repository location is at:
<https://github.com/RustCrypto/block-ciphers/tree/master/aes>
AES-NI is now autodetected at runtime on i686/x86-64 platforms.
If AES-NI is not present, the aes crate will fallback to a constant-time
portable software implementation.
To prevent this fallback (and have absence of AES-NI result in an illegal
instruction crash instead), continue to pass the same RUSTFLAGS which were
previously required for the aesni crate to compile:
RUSTFLAGS=-Ctarget-feature=+aes,+ssse3
Which versions are affected by RUSTSEC-2021-0059?
1 open source package ship an affected version, including aesni.
| Package | Affected | Fixed in |
|---|---|---|
aesni crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2021-0059?
No fix has been published for RUSTSEC-2021-0059 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2021-0059 being exploited?
There is no known exploitation of RUSTSEC-2021-0059 in the wild and no public exploit code.