chore: update RustCrypto ecosystem deps and fix API changes

- Update workspace deps: sha2 0.10→0.11, hmac 0.12→0.13, hkdf 0.12→0.13
- Fix getrandom 0.4 API: getrandom::getrandom() → getrandom::fill()
- Fix hmac 0.13 API: Mac::new_from_slice → KeyInit::new_from_slice
- Fix WASM getrandom: remove 0.2/0.4 dual dep, use 0.4 only
- All Rust tests passing (23 pass)

Author: systemslibrarian

Cargo.lock

@@ -4,22 +4,19 @@
 
 [workspace]
 resolver = "2"
-members = [
-    "crypto_core",
-    "rust_crypto",
-]
+members = ["crypto_core", "rust_crypto"]
 
 # Shared workspace dependencies can be defined here
 [workspace.dependencies]
 aes-gcm = "0.10"
 argon2 = "0.5"
-hkdf = "0.12"
-hmac = "0.12"
-sha2 = "0.10"
+hkdf = "0.13"
+hmac = "0.13"
+sha2 = "0.11"
 rand = "0.8"
 zeroize = { version = "1.8", features = ["zeroize_derive"] }
 x25519-dalek = { version = "2.0", features = ["static_secrets"] }
 thiserror = "1.0"
 # Force minimum version for transitive dependencies with known vulnerabilities
 # RUSTSEC-2026-0009: time local offset issue - requires >=0.3.47
-time = "0.3.47"
+time = "0.3.47"

Cargo.toml

@@ -154,10 +154,9 @@ wasm-bindgen-futures = { version = "0.4", optional = true }
 # Compression for WASM (optional)
 flate2 = { version = "1.0", optional = true }
 
-# WASM-compatible getrandom (0.2 for base deps)
+# WASM-compatible getrandom
 [target.'cfg(target_arch = "wasm32")'.dependencies]
-getrandom = { version = "0.2", features = ["js"] }
-getrandom_04 = { package = "getrandom", version = "0.4", features = ["wasm_js"] }
+getrandom = { version = "0.4", features = ["wasm_js"] }
 
 # Windows-specific dependencies for SecureBox (VirtualAlloc, VirtualLock)
 [target.'cfg(windows)'.dependencies]