Audit curve25519-dalek #75
Description
The curve25519-dalek crate has almost 5 million downloads (1.3 million of those in the last 90 days). It is a building block for many crypto libraries.
The library only uses unsafe for the two SIMD-backends (avx2 / ifma). From the README:
//! The implementation is memory-safe, and contains no significant
//! `unsafe` code. The SIMD backend uses `unsafe` internally to call SIMD
//! intrinsics. These are marked `unsafe` only because invoking them on an
//! inappropriate CPU would cause `SIGILL`, but the entire backend is only
//! compiled with appropriate `target_feature`s, so this cannot occur.
However, it would still be good if someone would audit those usages and maybe upload a cargo-crev review.