awslabs/llrt

Reduce number of dependencies of llrt_crypto

Open

#877 opened on Mar 7, 2025

View on GitHubContributor guide
 (3 comments) (2 reactions) (0 assignees)Rust (392 forks)github user discovery
dependenciesenhancementhelp wanted

Repository metrics

Stars
 (8,776 stars)
PR merge metrics
 (Avg merge 2d 14h) (49 merged PRs in 30d)

Description

The module has too many dependencies, it really pollutes any project trying to import it since some have very deep web of dependencies. For example we pull in two different bigint implementations (num-bigint-dig and crypto-bigint) We have a lot of duplicate with ring anyway and we should prefer using it. Curve crypto is still not in ring, but planned (https://github.com/briansmith/ring/issues/1771)

Contributor guide

Research direction
Analyze current dependencies of llrt crypto and identify where ring can replace or eliminate other crates.
Tech stack
rust
Domain
backendsecurity
Issue type
Refactor
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
RustGit
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
35