Is rust-crypto safe to use?

rust-crypto has 3 known vulnerabilities on the latest version (0.2.36). DepScope rates its health at 40/100 (high risk).

What is the latest version of rust-crypto?

The latest version of rust-crypto is 0.2.36, released 2016-05-20.

Does rust-crypto have known vulnerabilities?

Yes. rust-crypto has 3 known vulnerabilities. See depscope.dev/pkg/cargo/rust-crypto for details.

Is rust-crypto deprecated?

No, rust-crypto is actively maintained. Latest release: 0.2.36 (2016-05-20).

What are alternatives to rust-crypto?

Popular alternatives to rust-crypto in Cargo include: hashbrown, getrandom.

What license does rust-crypto use?

rust-crypto is licensed under MIT/Apache-2.0.

rust-crypto

cargov0.2.36

A (mostly) pure-Rust implementation of various common cryptographic algorithms.

License MIT/Apache-2.0permissive39 versions0 deps342,518 weekly dl

DaGenix/rust-crypto/

/ 100

Health

do not use

rust-crypto has critical vulnerabilities — do not use

Update to >= 0.2.37-0 to fix known vulnerabilities

Moderate health score (40/100) — verify manually
1 critical vulnerabilities

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

15/25

security

15/15

maturity

5/15

community

0/15

popularity_floor

Vulnerabilities

1 critical2 low

Advisories (3)

Severity	ID	Summary	Fixed in
critical	RUSTSEC-2022-0011	Miscomputation when performing AES encryption in rust-crypto	—
unknown	RUSTSEC-2016-0005	rust-crypto is unmaintained; switch to a modern alternative	0.2.37-0
unknown	GHSA-jp3w-3q88-34cf	Miscomputation when performing AES encryption in rust-crypto	—

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/rust-crypto