Ianleeclark/Paseto

OTP24 deprecated some :crypto functions that used by paseto

Closed this issue · 5 comments

mkurkov commented

Full list is here https://erlang.org/documentation/doc-12.0-rc2/doc/general_info/removed.html#functions-removed-in-otp-24

Warnings on OTP24:

==> paseto
Compiling 7 files (.ex)
warning: :crypto.hmac/3 is undefined or private, use crypto:mac/4 instead
  lib/paseto/utils/crypto.ex:73: Paseto.Utils.Crypto.hmac_sha384/2

warning: :crypto.hmac/4 is undefined or private, use crypto:macN/5 instead
  lib/paseto/utils/crypto.ex:81: Paseto.Utils.Crypto.hmac_sha384/3

warning: :crypto.stream_decrypt/2 is undefined or private, use crypto:crypto_update/2 instead
  lib/paseto/utils/crypto.ex:25: Paseto.Utils.Crypto.aes_256_ctr_decrypt/3

warning: :crypto.stream_encrypt/2 is undefined or private, use crypto:crypto_update/2 instead
  lib/paseto/utils/crypto.ex:13: Paseto.Utils.Crypto.aes_256_ctr_encrypt/3

warning: :crypto.stream_init/3 is undefined or private, use crypto:crypto_init/3 + crypto:crypto_update/2 + crypto:crypto_final/1 or crypto:crypto_one_time/4 instead
Found at 2 locations:
  lib/paseto/utils/crypto.ex:12: Paseto.Utils.Crypto.aes_256_ctr_encrypt/3
  lib/paseto/utils/crypto.ex:24: Paseto.Utils.Crypto.aes_256_ctr_decrypt/3

It seems that only V1 is affected by this.

Ianleeclark commented

Thank you for reporting! I'll try and find some time to resolve this, but PRs are welcome

Ianleeclark commented

jschneider1207/hkdf#3 I'll fork the hkdf package next weekend if the original owner doesn't respond

jared-mackey commented

@Ianleeclark looks like the changes to hkdf have been published to version 0.2.0. Is there any other blockers?

Ianleeclark commented

Technically no, but I'm just having trouble finding time. Happy to accept a PR

Ianleeclark commented

Available in 1.4.0

  • ❤️1