3 ms·
People unfamiliar with Rust constantly ask this question and the answer is always the same: because they're not reinventing the wheel and rolling their own cryp
by logicprog 4y ago
People unfamiliar with Rust constantly ask this question and the answer is always the same: because they're not reinventing the wheel and rolling their own cryptography, hash functions, etc. The more you do that, instead of using battle-tested existing libraries with plenty of maintainers, the more likely it is that you'll introduce a security vulnerability. Plus it duplicates effort unnecessarily, when it would be better to pool it.
For context, if anyone's curious, here's the dependency list:
clap = "4.0.32"
libc = "0.2.139"
thiserror = "1.0.38"
glob = "0.3.1"
sha2 = "0.10.6"
digest = "0.10.6"
signal-hook = "0.3.15"
log = "0.4.17"
syslog = "6.0.1"
env_logger = "0.9.3"