chore(deps): update rust crate ed25519-dalek to v2.1.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ed25519-dalek (source)	dependencies	patch	2.1.0 -> 2.1.1

GitHub Vulnerability Alerts

GHSA-w5vr-6qhr-36cc

Versions of ed25519-dalek prior to v2.0 model private and public keys as separate types which can be assembled into a Keypair, and also provide APIs for serializing and deserializing 64-byte private/public keypairs.

Such APIs and serializations are inherently unsafe as the public key is one of the inputs used in the deterministic computation of the S part of the signature, but not in the R value. An adversary could somehow use the signing function as an oracle that allows arbitrary public keys as input can obtain two signatures for the same message sharing the same R and only differ on the S part.

Unfortunately, when this happens, one can easily extract the private key.

Revised public APIs in v2.0 of ed25519-dalek do NOT allow a decoupled private/public keypair as signing input, except as part of specially labeled "hazmat" APIs which are clearly labeled as being dangerous if misused.

---

Release Notes

dalek-cryptography/curve25519-dalek (ed25519-dalek)

v2.1.1

Compare Source

• Fix nightly SIMD build

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[monoid]

This is NOT a security update (it would be so from 1.x).

[monoid]

utACK