{"id":"RUSTSEC-2024-0333","aliases":[],"status":"published","title":"`rsa-export` is unmaintained","description":"This crate has been deprecated in favour of using the native support for exporting RSA keys into the standard PEM format.  \nSee [docs.rs documentation].\n\nIn addition to that, the operations in this crate (arithmetic and Base64 encoding) are not done in constant-time, \npotentially [exposing the user to sidechannel attacks].\n\n[docs.rs documentation]: https://docs.rs/rsa/0.9.6/rsa/index.html#pkcs8-rsa-key-encoding\n[exposing the user to sidechannel attacks]: https://arxiv.org/pdf/2108.04600.pdf","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-04-06T12:00:00Z","modified":"2024-04-12T16:29:46Z","affected":[{"source":"osv","ecosystem":"crates.io","package":"rsa-export","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://crates.io/crates/rsa-export","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2024-0333.html","tags":["advisory"]},{"url":"https://crates.io/crates/rsa-export/0.3.3","tags":["package"]},{"url":"https://gitlab.com/smallglitch/rsa-export/-/commit/e29f17170d655a6f62eca8bf1f64ef0ce5807058","tags":["web"]}],"sources":{"osv":[{"id":"RUSTSEC-2024-0333","title":"`rsa-export` is unmaintained","description":"This crate has been deprecated in favour of using the native support for exporting RSA keys into the standard PEM format.  \nSee [docs.rs documentation].\n\nIn addition to that, the operations in this crate (arithmetic and Base64 encoding) are not done in constant-time, \npotentially [exposing the user to sidechannel attacks].\n\n[docs.rs documentation]: https://docs.rs/rsa/0.9.6/rsa/index.html#pkcs8-rsa-key-encoding\n[exposing the user to sidechannel attacks]: https://arxiv.org/pdf/2108.04600.pdf","status":"published","published":"2024-04-06T12:00:00Z","modified":"2024-04-12T16:29:46Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}