build(deps): bump rand_chacha from 0.3.1 to 0.9.0

Cargo.toml

@@ -58,7 +58,7 @@ macro_rules_attribute = "0.2"
 mls-crypto-provider = { path = "mls-provider" }
 obfuscate = { path = "obfuscate" }
 pem = "3.0"
-rand = { version = "0.8", features = ["getrandom"] }
+rand = { version = "0.9", features = ["os_rng"] }
 rmp-serde = "1.3.1"
 schnellru = "0.2"
 serde = "1.0"
@@ -85,7 +85,7 @@ der = { version = "0.7", default-features = false, features = ["std"] }
 ecdsa = { version = "0.16", default-features = false }
 ed25519-dalek = { version = "2.2", default-features = false }
 flagset = { version = "0.4", default-features = false }
-getrandom = { version = "0.2.8", default-features = false }
+getrandom = { version = "0.3.4", default-features = false }
 jwt-simple = { version = "0.13", git = "https://github.com/wireapp/rust-jwt-simple", tag = "v0.13.0-pre.core-crypto-1.0.0", default-features = false }
 p256 = { version = "0.13", default-features = false }
 p384 = { version = "0.13", default-features = false }
@@ -122,8 +122,8 @@ openmls_traits = { git = "https://github.com/wireapp/openmls", rev = "c9cde17076
 openmls_x509_credential = { git = "https://github.com/wireapp/openmls", rev = "c9cde17076508968c9cbead5728454f0a1f60c4f", version = "0.2" }
 
 # proteus
-proteus-traits = { git = "https://github.com/wireapp/proteus", tag = "v2.1.1" }
-proteus-wasm = { git = "https://github.com/wireapp/proteus", tag = "v2.1.1" }
+proteus-traits = { git = "https://github.com/wireapp/proteus", tag = "v2.1.2" }
+proteus-wasm = { git = "https://github.com/wireapp/proteus", tag = "v2.1.2" }
 
 [profile.release]
 codegen-units = 1

e2e-identity/Cargo.toml

@@ -38,7 +38,7 @@ p256 = { workspace = true }
 p384 = { workspace = true }
 p521 = { workspace = true }
 pem = { workspace = true }
-getrandom = { workspace = true, features = ["js"] }
+getrandom = { workspace = true, features = ["wasm_js"] }
 web-time = { workspace = true }
 hex = { workspace = true }
 flagset = { workspace = true }

e2e-identity/tests/utils/idp/authelia/mod.rs

@@ -2,7 +2,7 @@
 
 use argon2::{
     Algorithm, Argon2, ParamsBuilder, Version,
-    password_hash::{PasswordHasher, SaltString, rand_core::OsRng},
+    password_hash::{PasswordHasher, SaltString},
 };
 use http::header;
 use oauth2::{CsrfToken, PkceCodeChallenge, RedirectUrl, Scope};
@@ -31,7 +31,7 @@
     let params = ParamsBuilder::new().m_cost(65536).p_cost(4).t_cost(3).build().unwrap();
 
     let argon2 = Argon2::new(Algorithm::Argon2id, Version::V0x13, params);
     let salt = SaltString::generate(&mut OsRng);
 
     // Return the digest as a PHC string ($argon2id$v=19$...).
     // https://github.com/P-H-C/phc-string-format/blob/master/phc-sf-spec.md

keystore/Cargo.toml

@@ -33,8 +33,8 @@ postcard = { version = "1.1", default-features = false, features = ["use-std"] }
 sha2.workspace = true
 serde_json.workspace = true
 core-crypto-macros.workspace = true
-rand = { workspace = true, features = ["getrandom"] }
-getrandom = { version = "0.2", features = ["js"] }
+rand = { workspace = true, features = ["os_rng"] }
+getrandom = { version = "0.3", features = ["wasm_js"] }
 obfuscate = { workspace = true, features = ["openmls"] }
 openmls = { workspace = true }
 x509-cert = { workspace = true }

mls-provider/Cargo.toml

@@ -34,10 +34,9 @@ spki = { version = "0.7", features = ["pem", "fingerprint"] }
 x509-cert = { workspace = true, features = ["builder", "hazmat"] }
 wire-e2e-identity = { workspace = true }
 web-time = "1.1.0"
-rand = { workspace = true, features = ["getrandom"] }
-getrandom = { version = "0.2", features = ["js"] }
-rand_core = "0.6"
-rand_chacha = "0.3"
+rand = { workspace = true, features = ["os_rng"] }
+getrandom = { version = "0.3", features = ["wasm_js"] }
+rand_chacha = "0.9"
 zeroize.workspace = true
 thiserror.workspace = true
 hex.workspace = true
@@ -46,7 +45,7 @@ core-crypto-keystore.workspace = true
 typed-builder.workspace = true
 
 [dependencies.hpke]
-version = "0.12"
+version = "0.13"
 features = ["x25519", "p256", "p384", "p521"]
 
 [dev-dependencies]

mls-provider/src/crypto_provider.rs

@@ -14,7 +14,7 @@
         HpkeKemType, SignatureScheme,
     },
 };
-use rand_core::{RngCore, SeedableRng};
+use rand::{SeedableRng as _, TryRngCore as _};
 use sha2::{Digest, Sha256, Sha384, Sha512};
 use signature::digest::typenum::Unsigned;
 use tls_codec::SecretVLBytes;
@@ -29,7 +29,7 @@
 impl Default for RustCrypto {
     fn default() -> Self {
         Self {
-            rng: Arc::new(rand_chacha::ChaCha20Rng::from_entropy().into()),
+            rng: Arc::new(rand_chacha::ChaCha20Rng::from_os_rng().into()),
         }
     }
 }
@@ -240,17 +240,17 @@
 
         match alg {
             SignatureScheme::ECDSA_SECP256R1_SHA256 => {
                 let sk = p256::ecdsa::SigningKey::random(&mut *rng);
                 let pk = sk.verifying_key().to_sec1_bytes().to_vec();
                 Ok((sk.to_bytes().to_vec(), pk))
             }
             SignatureScheme::ECDSA_SECP384R1_SHA384 => {
                 let sk = p384::ecdsa::SigningKey::random(&mut *rng);
                 let pk = sk.verifying_key().to_sec1_bytes().to_vec();
                 Ok((sk.to_bytes().to_vec(), pk))
             }
             SignatureScheme::ECDSA_SECP521R1_SHA512 => {
                 let sk = p521::ecdsa::SigningKey::random(&mut *rng);
                 let pk = p521::ecdsa::VerifyingKey::from(&sk)
                     .to_encoded_point(false)
                     .to_bytes()
@@ -258,7 +258,7 @@
                 Ok((sk.to_bytes().to_vec(), pk))
             }
             SignatureScheme::ED25519 => {
                 let k = ed25519_dalek::SigningKey::generate(&mut *rng);
                 let pk = k.verifying_key();
                 Ok((k.to_bytes().into(), pk.to_bytes().into()))
             }
@@ -617,7 +617,7 @@
         info: &[u8],
         aad: &[u8],
         plaintext: &[u8],
-        csprng: &mut impl rand_core::CryptoRngCore,
+        csprng: &mut impl rand::CryptoRng,
     ) -> Result<HpkeCiphertext, CryptoError> {
         use hpke::{Deserializable as _, Serializable as _};
         let key = Kem::PublicKey::from_bytes(public_key).map_err(|_| CryptoError::HpkeEncryptionError)?;
@@ -633,7 +633,7 @@
 
     #[allow(dead_code)]
     pub(crate) fn hpke_gen_keypair<Kem: hpke::Kem>(
-        csprng: &mut impl rand_core::CryptoRngCore,
+        csprng: &mut impl rand::CryptoRng,
     ) -> Result<HpkeKeyPair, CryptoError> {
         use hpke::Serializable as _;
         let (sk, pk) = Kem::gen_keypair(csprng);
@@ -676,7 +676,7 @@
         info: &[u8],
         export_info: &[u8],
         export_len: usize,
-        csprng: &mut impl rand_core::CryptoRngCore,
+        csprng: &mut impl rand::CryptoRng,
     ) -> Result<(Vec<u8>, Vec<u8>), CryptoError> {
         use hpke::{Deserializable as _, Serializable as _};
         let key = Kem::PublicKey::from_bytes(tx_public_key).map_err(|_| CryptoError::SenderSetupError)?;
@@ -695,7 +695,7 @@
 impl OpenMlsRand for RustCrypto {
     type Error = MlsProviderError;
 
     type RandImpl = rand_chacha::ChaCha20Rng;
     type BorrowTarget<'a> = RwLockWriteGuard<'a, Self::RandImpl>;
 
     fn borrow_rand(&self) -> Result<Self::BorrowTarget<'_>, Self::Error> {