x509: replace ring with pure rust sha1

Author: karalabe

Cargo.lock

@@ -26,7 +26,7 @@ pem = ["dep:base64"]
 rand = []
 rsa = ["pem", "dep:rsa", "dep:signature"]
 stream = ["dep:age-core", "dep:chacha20poly1305", "dep:pin-project", "dep:zeroize"]
-x509 = ["xdsa", "dep:bcder", "dep:bytes", "dep:chrono", "dep:ring", "dep:x509-certificate"]
+x509 = ["xdsa", "dep:bcder", "dep:bytes", "dep:chrono", "dep:sha1", "dep:x509-certificate"]
 xdsa = ["pem", "eddsa", "mldsa", "x509", "dep:x509-parser"]
 xhpke = ["pem", "xdsa", "dep:generic-array", "dep:hpke", "dep:rand", "dep:rand_chacha", "dep:x-wing"]
 
@@ -51,7 +51,7 @@ pin-project = { version = "1.1.9", optional = true }
 pkcs8 = { version = "0.10.2", features = ["std"], optional = true }
 rand = { version = "0.9.2", optional = true }
 rand_chacha = { version = "0.9.0", optional = true }
-ring = { version = "0.17.14", features = ["wasm32_unknown_unknown_js"], optional = true }
+sha1 = { version = "0.10.6", optional = true }
 rsa = { version = "0.9.8", features = ["sha2"], optional = true }
 sha2 = { version = "0.10.9", optional = true }
 signature = { version = "2.2.0", features = ["rand_core"], optional = true }

Cargo.toml

@@ -14,7 +14,7 @@ use bcder::Oid;
 use bcder::encode::Values;
 use bytes::Bytes;
 use chrono::{TimeZone, Utc};
-use ring::digest::{Context, SHA1_FOR_LEGACY_USE_ONLY};
+use sha1::{Digest, Sha1};
 use std::error::Error;
 use x509_certificate::asn1time::Time;
 use x509_certificate::rfc3280::{
@@ -72,9 +72,9 @@ fn make_cn_name(cn: &str) -> Name {
 fn make_ski_ext(public_key: &[u8]) -> Extension {
     // Create the SHA1 hash of the subject public key
     let id = {
-        let mut ctx = Context::new(&SHA1_FOR_LEGACY_USE_ONLY);
-        ctx.update(public_key);
-        ctx.finish()
+        let mut hasher = Sha1::new();
+        hasher.update(public_key);
+        hasher.finalize()
     };
     // Encode the subject extension value
     let mut buf = Vec::new();
@@ -93,9 +93,9 @@ fn make_ski_ext(public_key: &[u8]) -> Extension {
 fn make_aki_ext(public_key: &[u8]) -> Extension {
     // Create the SHA1 hash of the issuer public key
     let id = {
-        let mut ctx = Context::new(&SHA1_FOR_LEGACY_USE_ONLY);
-        ctx.update(public_key);
-        ctx.finish()
+        let mut hasher = Sha1::new();
+        hasher.update(public_key);
+        hasher.finalize()
     };
     // Encode the issuer extension value
     let mut buf = vec![