Bump redjubjub from 0.2.1 to 0.6.0

[dependabot]

Bumps redjubjub from 0.2.1 to 0.6.0.

Release notes

Sourced from redjubjub's releases.

0.6.0

Changes

• refactor to use reddsa crate (#152)
• remove unneeded digest dependency (#156)

RedJubjub 0.5.0

Changes

• Upgrade jubjub to 0.9, blake2b_simd to 1 (#147)
• Fixed a bug where small-order verification keys (including the identity) were handled inconsistently: the VerificationKey parsing logic rejected them, but the identity VerificationKey could be produced from the zero SigningKey. The behaviour is now to consistently accept all small-order verification keys, matching the RedDSA specification. (#137)
  • Downstream users who currently rely on the inconsistent behaviour (for e.g. consensus compatibility, either explicitly wanting to reject small-order verification keys, or on the belief that this crate implemented the RedDSA specification) should continue to use previous versions of this crate, until they can either move the checks into their own code, or migrate their consensus rules to match the RedDSA specification.

RedJubjub 0.4.0

Changes

• Upgrade rand to 0.8, rand_core to 0.6, and rand_chacha to 0.3, together (#55)
• Migrate to jubjub 0.6 (#59)
• Derive Debug, PartialEq (#67)
• Restrict the maximum number of participants to 255 by using u8 (#66)

RedJubjub 0.3.0

Includes FROST!

Changelog

Sourced from redjubjub's changelog.

0.6.0

• Refactor to use reddsa (which is a generalization of this crate).
• Remove FROST code. Use The reddsa crate directly if you need it.

0.5.1

• Remove unneeded digest dependency

0.5.0

• Upgrade jubjub to 0.9, blake2b_simd to 1

• Fixed a bug where small-order verification keys (including the identity) were handled inconsistently: the VerificationKey parsing logic rejected them, but the identity VerificationKey could be produced from the zero SigningKey. The behaviour is now to consistently accept all small-order verification keys, matching the RedDSA specification.

  • Downstream users who currently rely on the inconsistent behaviour (for e.g. consensus compatibility, either explicitly wanting to reject small-order verification keys, or on the belief that this crate implemented the RedDSA specification) should continue to use previous versions of this crate, until they can either move the checks into their own code, or migrate their consensus rules to match the RedDSA specification.

0.4.0

• Upgrade rand to 0.8, rand_core to 0.6, and rand_chacha to 0.3, together (#55)
• Migrate to jubjub 0.6 (#59)
• Derive Debug, PartialEq (#67)
• Restrict the maximum number of FROST participants to 255 by using u8 (#66)

0.3.0

• Initial support for FROST (Flexible Round-Optimized Schnorr Threshold) signatures.

0.2.2

• Make batch::Item: Clone + Debug and add batch::Item::verify_single for fallback verification when batch verification fails.

Commits

• 6734710 0.6.0
• 96febcf refactor to use reddsa crate (#152)
• 6993b12 remove unneeded digest dependency (#156)
• e19279f Upgrade jubjub to 0.9, blake2b_simd to 1 (#147)
• b6a8c45 Bump codecov/codecov-action from 3.0.0 to 3.1.0
• 5d59067 Bump actions/checkout from 2.4.0 to 3.0.2
• 6f4d22b Bump codecov/codecov-action from 2.1.0 to 3.0.0
• e615db7 Attempt to fix coverage by copying Zebra workflow
• a32ae3f Don't reject small-order verification keys (#137)
• 2f240d8 Update jubjub requirement from 0.7 to 0.8 (#131)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Dependabot tried to add @dconnolly as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/andrcmdr/zebra/pulls/64/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the andrcmdr/zebra repository. // See: https://docs.github.com/rest/reference/pulls#request-reviewers-for-a-pull-request