Update RustCrypto dependencies.

Updates the following RustCrypto dependencies to the latest versions:

  * `hmac` to v0.12.0
  * `sha2` to v0.10.0
  * `hkdf` to v0.12.0

MSRV is now 1.53.

Cargo.toml

@@ -26,11 +26,11 @@ percent-encoding = { version = "2.0", optional = true }
 
 # dependencies for secure (private/signed) functionality
 aes-gcm = { version = "0.9.0", optional = true }
-hmac = { version = "0.11.0", optional = true }
-sha2 = { version = "0.9.0", optional = true }
+hmac = { version = "0.12.0", optional = true }
+sha2 = { version = "0.10.0", optional = true }
 base64 = { version = "0.13", optional = true }
 rand = { version = "0.8", optional = true }
-hkdf = { version = "0.11.0", optional = true }
+hkdf = { version = "0.12.0", optional = true }
 subtle = { version = "2.3", optional = true }
 
 [build-dependencies]

README.md

@@ -19,8 +19,7 @@ See the [documentation](http://docs.rs/cookie) for detailed usage information.
 
 # MSRV
 
-The minimum supported `rustc` version for cookie `0.16` is `1.48` _without_
-`secure` features enabled and `1.49` otherwise.
+khe minimum supported `rustc` version for cookie `0.16` is `1.53`.
 
 The minimum supported `rustc` version for cookie `0.15` is `1.41`.
 

src/secure/signed.rs

@@ -2,7 +2,7 @@ use std::convert::TryInto;
 use std::borrow::{Borrow, BorrowMut};
 
 use sha2::Sha256;
-use hmac::{Hmac, Mac, NewMac};
+use hmac::{Hmac, Mac};
 
 use crate::secure::{base64, Key};
 use crate::{Cookie, CookieJar};
@@ -60,7 +60,7 @@ impl<J> SignedJar<J> {
         // Perform the verification.
         let mut mac = Hmac::<Sha256>::new_from_slice(&self.key).expect("good key");
         mac.update(value.as_bytes());
-        mac.verify(&digest)
+        mac.verify_slice(&digest)
             .map(|_| value.to_string())
             .map_err(|_| "value did not verify")
     }