chore(deps): update constant_time_eq requirement from >=0.4.0, <0.4.3 to >=0.4.0, <0.5.1

[dependabot]

Updates the requirements on constant_time_eq to permit the latest version.

Changelog

Sourced from constant_time_eq's changelog.

0.5.0

• Unfortunately, the Rust-version aware resolver only has an effect if the main crate being compiled is using edition 2024 or opts in, it's not enough to have edition 2024 in a dependency. Yanked 0.4.3 and released 0.5.0; no changes other than the version number. Being able to add new inline assembly architectures without requiring a manual version update in all dependent crates will have to wait until most of the ecosystem is using edition 2024.

0.4.3 (yanked)

• Rust 1.95.0 stabilized inline assembly for PowerPC. Increase the Rust minimum version to allow its use. Cargo's version-aware dependency resolution should prevent this from being a breaking change.

0.4.2

• Refactor detection of the DIT feature on ARM. For builds without the "std" feature, there's now an undocumented function to force the use of the DIT bit.

0.4.1

• Simplify code to make it easier to review.

0.4.0

BREAKING CHANGE: this crate now has a "std" feature which is enabled by default. Disable it if you need to use this crate as a no_std crate.

Previous versions of this crate protected against the optimizer doing an early exit when the accumulator becomes non-zero (found a difference), but not against a sufficiently smart optimizer doing an early exit when the accumulator has all bits set (the accumulator never clears a bit, so having all bits set means it will no longer change).

Protecting against that also prevents autovectorization, so this release does manual vectorization to recover most of the speed lost. Where there is enough compiler support (stable vector intrinsics), it uses a mix of vector intrinsics and inline assembly for inputs which are a multiple of the vector size, while for other architectures and for the remainder of an input which is not a multiple of the vector size, it uses a generic word-at-a-time implementation with the native word size.

Some newer implementations of the ARM architecture do not guarantee the timing of instructions unless the DIT bit is set. Fortunately, that bit can be set on all privilege levels; unfortunately, that bit only exists on these newer implementations of the ARM architecture, and the flag to detect whether it exists is not accessible on all privilege levels. How

... (truncated)

Commits

• afe1dc7 Release 0.5.0
• de13231 Release 0.4.3
• c55cf6f Update criterion to 0.8.2
• 2230202 Use inline asm for powerpc
• 9d3a6da Update criterion to 0.7
• 86f38ed Release 0.4.2
• c8b7924 Update count_instructions to 0.2.0
• 508e633 Small cleanups
• 421e49a Refactor DIT detection
• 039ea77 Release 0.4.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)