deps(identity): bump ring to v0.17.5

The `libp2p-identity` crate is a dependency of the entire ecosystem. We should keep its dependencies up to date as much as possible. At the moment, we can't bump `ring` across the entire workspace because we still need releases of `rustls` that update to the new `ring` version. Not all our users depend in `libp2p-tls` or `libp2p-quic` though. For those users, a bump in `libp2p-identity` will be useful.

Pull-Request: #4779.

Author: thomaseizinger

Cargo.lock

@@ -81,7 +81,7 @@ libp2p-dns = { version = "0.41.1", path = "transports/dns" }
 libp2p-floodsub = { version = "0.44.0", path = "protocols/floodsub" }
 libp2p-gossipsub = { version = "0.46.0", path = "protocols/gossipsub" }
 libp2p-identify = { version = "0.44.0", path = "protocols/identify" }
-libp2p-identity = { version = "0.2.7" }
+libp2p-identity = { version = "0.2.8" }
 libp2p-kad = { version = "0.45.1", path = "protocols/kad" }
 libp2p-mdns = { version = "0.45.0", path = "protocols/mdns" }
 libp2p-memory-connection-limits = { version = "0.2.0", path = "misc/memory-connection-limits" }

Cargo.toml

@@ -1,3 +1,8 @@
+## 0.2.8
+
+- Bump `ring` to `0.17.5.
+  See [PR 4779](https://github.com/libp2p/rust-libp2p/pull/4779).
+
 ## 0.2.7
 
 - Add `rand` feature to gate methods requiring a random number generator, enabling use in restricted environments (e.g. smartcontracts).

identity/CHANGELOG.md

@@ -1,6 +1,6 @@
 [package]
 name = "libp2p-identity"
-version = "0.2.7"
+version = "0.2.8"
 edition = "2021"
 description = "Data structures and algorithms for identifying peers in libp2p."
 rust-version = { workspace = true }
@@ -30,7 +30,7 @@ void = { version = "1.0", optional = true }
 zeroize = { version = "1.6", optional = true }
 
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
-ring = { version = "0.16.9", features = [ "alloc", "std"], default-features = false, optional = true }
+ring = { version = "0.17.5", features = [ "alloc", "std"], default-features = false, optional = true }
 
 [features]
 secp256k1 = ["dep:libsecp256k1", "dep:asn1_der", "dep:sha2", "dep:hkdf", "dep:zeroize"]

identity/Cargo.toml

@@ -71,7 +71,7 @@ impl Keypair {
 
     /// Sign a message with this keypair.
     pub fn sign(&self, data: &[u8]) -> Result<Vec<u8>, SigningError> {
-        let mut signature = vec![0; self.0.public_modulus_len()];
+        let mut signature = vec![0; self.0.public().modulus_len()];
         let rng = SystemRandom::new();
         match self.0.sign(&RSA_PKCS1_SHA256, &rng, data, &mut signature) {
             Ok(()) => Ok(signature),