apache / apache/teaclave-sgx-sdk

Update getrandom-sgx to v2.3

Open
#350 2 comments 1 reaction 0 assignees View on GitHub
Dominant language
Rust
Stars
1.2k
Forks
268
PR merge metrics
No merged PRs in 30d

Description

We're currently trying to update our substrate dependencies to v4.0.0-dev (see issue https://github.com/integritee-network/worker/issues/346). But substrate now depends on hashbrown 0.11.0 which itself depends on getrandom 2.3 (same as in issue #326). We're currently in the development phase, so having our own getrandom fork and keeping it up to date all the time is not yet necessary from a security perspective. A simple patch to your [getrandom-sgx](https://github.com/mesalock-linux/getrandom-sgx) crate would be enough.

Would it be possible to update [getrandom-sgx](https://github.com/mesalock-linux/getrandom-sgx) to v2.3 so we can apply the patch?

Thanks alot for your help so far!

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the dependency context in issues #346 and #326, then inspect how this repository references the getrandom-sgx crate. Check the linked getrandom-sgx project for the v2.3 update path and verify that the resulting patch can be applied to the current Substrate dependency set; done means the SDK can use getrandom 2.3 without its dependency conflict.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.