Skip to content

Upgrading rustls 0.22 to 0.23

Breaking0.22.4 → 0.23.46Breaking11Security13Platform5New93Changed133Fixed85Other311

Full comparisonBack to rustls
BreakingUpgrade verdict

11 breaking changes and 5 platform requirement changes and 13 security fixes.

In plain terms
  • Removes the ClientHello constructor from the server API.
  • If you build rustls without the standard library support, the function that installs the default crypto provider now returns a different type than before.
  • Removes the `default_fips_provider()` item when aws_lc_rs is not enabled.
  • Renames SignatureScheme::sign.
Must act Top 5 of 29 that need code or config changes

Rust requirement changed in 0.23.20: 1.61 → 1.71.

What you must change

Breaking11
Removes the ClientHello constructor from the server API.
ClientHello
0.23.20GitHub ReleaseSummarizedView source
Corrects the return type of CryptoProvider::install_default() so it no longer varies with the std crate feature, a breaking API change for no_std users.
CryptoProvider::install_default()
0.23.14GitHub ReleaseSummarizedView source
Removes the default_fips_provider() item when aws_lc_rs is not enabled.
default_fips_provider()
0.23.13GitHub ReleaseSummarizedView source
Renames SignatureScheme::sign.
SignatureScheme::sign
0.23.6GitHub ReleaseSummarizedView source
Breaking change: CipherSuiteCommon::integrity_limit field removed (this was QUIC-specific, it has moved to quic::PacketKey::integrity_limit()).
CipherSuiteCommon::integrity_limitquic::PacketKey::integrity_limit()
0.23.0GitHub ReleaseOriginalView source
Breaking change: crypto::cipher::BorrowedPlainMessage and crypto::cipher::OpaqueMessage have been renamed (to OutboundPlainMessage and OutboundOpaqueMessage) and altered to support performance…
crypto::cipher::BorrowedPlainMessagecrypto::cipher::OpaqueMessageOutboundPlainMessageOutboundOpaqueMessage
0.23.0GitHub ReleaseOriginalView source
Breaking change: all protocol enum types (eg. [CipherSuite]) have had their get_u8/get_u16 accessor removed; use u8::from() / u16::from() instead.
CipherSuiteget_u8get_u16u8::from()u16::from()
0.23.0GitHub ReleaseOriginalView source
Remove the TLS 1.2 session ticket on DecryptError.
0.23.0GitHub ReleaseOriginalView source
Remove work-around for loading SEC1-format ECDSA keys.
0.23.0GitHub ReleaseOriginalView source
Moves post-quantum key exchange from kyber768 to ML-KEM768.
kyber768ML-KEM768
0.23.16GitHub ReleaseSummarizedView source
Acceptor API error handling improvement.
AcceptorErr()Acceptor::acceptAccepted::into_connection
0.23.0GitHub ReleaseOriginalView source
Security13
Fixes GHSA-h2v8-394m-p7vv: built-in Brotli certificate decompression can allocate up to 1 GiB of attacker-controlled memory before authentication.
Low · CVSS 3.7
0.23.46GitHub ReleaseSummarizedView source
Fixes GHSA-c8m5-c952-6cm4: Debug impls for Tls12ClientSessionValue and Tls13ClientSessionValue include secret data.
Tls12ClientSessionValueTls13ClientSessionValueDebugMedium · CVSS 4.0
0.23.46GitHub ReleaseSummarizedView source
Fixes GHSA-w44r-93j7-qv28: an unauthenticated ServerHello poisons per-name key-exchange hints so later ClientHellos carry only a classical X25519 share.
X25519Low · CVSS 3.7
0.23.46GitHub ReleaseSummarizedView source
Fixes GHSA-vp88-798v-h67f: in 0.23.44 and 0.23.45, buffered application data is sent even when the server rejects ECH.
ECHLow · CVSS 2.3
0.23.46GitHub ReleaseSummarizedView source
Fixes TLS 1.3 handshake messages being accepted at the wrong encryption level after a key-changing message in the same record.
Medium · CVSS 5.3
0.23.45GitHub ReleaseSummarizedView source
Affected versions are rustls 0.23.13 through 0.23.44 inclusive; upgrade to 0.23.45 or later.
0.23.45GitHub ReleaseSummarizedView source
Restricts files created by the built-in KeyLogFile implementation to owner-only read permissions.
KeyLogFile
0.23.44GitHub ReleaseSummarizedView source
Does not retain master secret during terminal key schedule state.
0.23.29GitHub ReleaseSummarizedView source
StoresServerSessions now guarantees keys are high entropy.
StoresServerSessions
0.23.17GitHub ReleaseSummarizedView source
Ensures only max_early_data_size bytes of early data are accepted when read while being received.
max_early_data_size
0.23.13GitHub ReleaseSummarizedView source
Tightens up ticketer decryption.
0.23.11GitHub ReleaseSummarizedView source
rustls::ConnectionCommon::complete_io could fall into an infinite loop based on network input
High · CVSS 7.5
0.23.5GitHub AdvisoryOriginalView source
rustls network-reachable panic in Acceptor::accept
0.23.0GitHub AdvisoryOriginalView source
Platform5
Keeps MSRV at 1.71 but recommends Rust 1.73 or later due to a compiler bug in 1.71.
0.23.20GitHub ReleaseSummarizedView source
Relaxes the MSRV back to 1.63 for this one-off release, which contains the RUSTSEC-2024-0399 fix.
0.23.19GitHub ReleaseSummarizedView source
Notes that this is a one-off: no future releases will have MSRV 1.63, and 0.23.20 returns to MSRV 1.71.
0.23.19GitHub ReleaseSummarizedView source
Moves the crate minimum supported Rust version to 1.71.
0.23.18GitHub ReleaseSummarizedView source
Raises the minimum supported Rust version (MSRV) from 1.61 to 1.63.
0.23.6GitHub ReleaseSummarizedView source