Fixes psychic papers vulnerability in signature verification. https://github.com/freifunk-gluon/ecdsautils/security/advisories/GHSA-qhcg-9ffp-78pw Fixes: CVE-2022-24884
28 lines
702 B
Nix
28 lines
702 B
Nix
{ lib, stdenv, pkgs }:
|
|
|
|
let
|
|
pname = "ecdsautils";
|
|
version = "0.4.1";
|
|
in
|
|
stdenv.mkDerivation {
|
|
inherit pname version;
|
|
|
|
src = pkgs.fetchFromGitHub {
|
|
owner = "freifunk-gluon";
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
sha256 = "sha256-dv0guQTmot5UO1GkMgzvD6uJFyum5kV89LI3xWS1DZA=";
|
|
};
|
|
|
|
nativeBuildInputs = with pkgs; [ cmake pkg-config doxygen ];
|
|
buildInputs = with pkgs; [ libuecc ];
|
|
|
|
meta = with lib; {
|
|
description = "Tiny collection of programs used for ECDSA (keygen, sign, verify)";
|
|
homepage = "https://github.com/freifunk-gluon/ecdsautils/";
|
|
license = with licenses; [ mit bsd2 ];
|
|
maintainers = with maintainers; [ ];
|
|
platforms = platforms.unix;
|
|
};
|
|
}
|