Merge pull request #13

Move to aws-lc-rs

Author: marconae

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "exarrow-rs"
-version = "0.5.0"
+version = "0.5.1"
 edition = "2021"
 license = "MIT"
 authors = ["Exasol Labs"]
@@ -42,20 +42,18 @@ urlencoding = "2.1"
 # Hex encoding for binary data
 hex = "0.4"
 
-# RSA encryption for Exasol authentication
-rsa = "0.9"
+# RSA encryption for Exasol authentication (aws-lc-rs replaces rsa crate to eliminate CVE-2023-49092)
+aws-lc-rs = "1"
 base64 = "0.22"
-# Use rand_core 0.6 for compatibility with rsa crate's CryptoRng trait
-rand_core = { version = "0.6", features = ["getrandom"] }
 
 # ADBC core traits (optional, for FFI export)
 adbc_core = { version = "0.21.0", optional = true }
 adbc_ffi = { version = "0.21.0", optional = true }
 
 # TLS certificate generation for secure import/export
 rcgen = "0.13"
-rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
-tokio-rustls = { version = "0.26", default-features = false, features = ["ring"] }
+rustls = { version = "0.23", default-features = false, features = ["aws-lc-rs", "std", "tls12"] }
+tokio-rustls = { version = "0.26", default-features = false, features = ["aws-lc-rs"] }
 
 # Parquet file support
 parquet = { version = "57.1.0", features = ["async"] }