RUSTSEC-2021-0060 `aes-soft` has been merged into the `aes` crate
The aes-soft crate is deprecated and merged into the aes crate; users should migrate to the aes crate for continued support and security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is RUSTSEC-2021-0060?
RUSTSEC-2021-0060 is a vulnerability in aes-soft, published on 29 Apr 2021.
Official description
Please use the aes crate going forward. The new repository location is at:
<https://github.com/RustCrypto/block-ciphers/tree/master/aes>
AES-NI is now autodetected at runtime on i686/x86-64 platforms.
If AES-NI is not present, the aes crate will fallback to a constant-time
portable software implementation.
To force the use of a constant-time portable implementation on these platforms,
even if AES-NI is available, use the new force-soft feature of the aes
crate to disable autodetection.
Which versions are affected by RUSTSEC-2021-0060?
1 open source package ship an affected version, including aes-soft.
| Package | Affected | Fixed in |
|---|---|---|
aes-soft crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2021-0060?
No fix has been published for RUSTSEC-2021-0060 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2021-0060 being exploited?
There is no known exploitation of RUSTSEC-2021-0060 in the wild and no public exploit code.