[package]
name = "nigig-pdf-cos"
version = "0.1.0"
edition = "2021"
license = "MIT OR Apache-2.0"
description = "PDF COS layer: lexer, parser, filters, xref, and object model. No UI dependencies."

[dependencies]
miniz_oxide = "0.7"

# Audited RustCrypto primitives for the standard security handler.
# Phase 0 deleted a hand-rolled MD5/SHA/AES/RC4 implementation from this
# codebase and called it a CVE factory; ADR 0005 keeps that rule.
aes = "0.8"
cbc = { version = "0.1", features = ["alloc"] }
rc4 = "0.1"
md-5 = "0.10"
sha2 = "0.10"

# Salts and initialisation vectors for encryption-on-save must come from
# the OS CSPRNG. A predictable IV in CBC mode is a real break, not a
# nicety, and this codebase has a standing rule against hand-rolled
# crypto (ADR 0005) which extends to hand-rolled randomness.
getrandom = "0.2"