From a3945ac64233014d73410417e4ae6cd2d2ee4f6e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 16:11:21 +0000
Subject: [PATCH] Update Rust crate sha3 to 0.12

---
 security-monitor/Cargo.lock    | 21 +++++++++++++++++++--
 security-monitor/Cargo.toml    |  2 +-
 tools/cove_tap_tool/Cargo.lock | 21 +++++++++++++++++++--
 tools/cove_tap_tool/Cargo.toml |  2 +-
 4 files changed, 40 insertions(+), 6 deletions(-)

diff --git a/security-monitor/Cargo.lock b/security-monitor/Cargo.lock
index 50e575b..9e88b1a 100644
--- a/security-monitor/Cargo.lock
+++ b/security-monitor/Cargo.lock
@@ -353,7 +353,7 @@ dependencies = [
  "kem",
  "module-lattice",
  "rand_core",
- "sha3",
+ "sha3 0.11.0",
 ]
 
 [[package]]
@@ -534,7 +534,7 @@ dependencies = [
  "pointers_utility",
  "riscv-decode",
  "riscv_cove_tap",
- "sha3",
+ "sha3 0.12.0",
  "spin",
  "thiserror-no-std",
 ]
@@ -564,6 +564,17 @@ dependencies = [
  "keccak",
 ]
 
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest",
+ "keccak",
+ "sponge-cursor",
+]
+
 [[package]]
 name = "shlex"
 version = "2.0.1"
@@ -576,6 +587,12 @@ version = "0.12.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8abadc99fd9c7bbb7d0ca2b31d72a067d0c0dcd7aad25ab8cac71ba91417694b"
 
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
 [[package]]
 name = "static_assertions"
 version = "1.1.0"
diff --git a/security-monitor/Cargo.toml b/security-monitor/Cargo.toml
index a8f7a36..02d0382 100644
--- a/security-monitor/Cargo.toml
+++ b/security-monitor/Cargo.toml
@@ -31,7 +31,7 @@ spin = {version="0.12", default-features = false, features = ["once", "rwlock",
 riscv_cove_tap = {path = "rust-crates/riscv_cove_tap", features = ["parser"]}
 
 # Used to measure confidential VM, required for attestation
-sha3 = { version = "0.11", default-features = false }
+sha3 = { version = "0.12", default-features = false }
 hybrid-array = { version = "0.4", default-features = false }
 
 # provides macros that help removing boilerplate code in the rust error handling
diff --git a/tools/cove_tap_tool/Cargo.lock b/tools/cove_tap_tool/Cargo.lock
index f87d042..1b62d40 100644
--- a/tools/cove_tap_tool/Cargo.lock
+++ b/tools/cove_tap_tool/Cargo.lock
@@ -221,7 +221,7 @@ dependencies = [
  "ml-kem",
  "rand",
  "riscv_cove_tap",
- "sha3",
+ "sha3 0.12.0",
  "thiserror",
 ]
 
@@ -398,7 +398,7 @@ dependencies = [
  "module-lattice",
  "pkcs8",
  "rand_core",
- "sha3",
+ "sha3 0.11.0",
 ]
 
 [[package]]
@@ -517,6 +517,17 @@ dependencies = [
  "keccak",
 ]
 
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest",
+ "keccak",
+ "sponge-cursor",
+]
+
 [[package]]
 name = "spki"
 version = "0.8.0"
@@ -527,6 +538,12 @@ dependencies = [
  "der",
 ]
 
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
 [[package]]
 name = "strsim"
 version = "0.11.1"
diff --git a/tools/cove_tap_tool/Cargo.toml b/tools/cove_tap_tool/Cargo.toml
index e33e2b8..1456b45 100644
--- a/tools/cove_tap_tool/Cargo.toml
+++ b/tools/cove_tap_tool/Cargo.toml
@@ -10,7 +10,7 @@ clap = { version="4.6", features = ["derive"] } # for command line argument pars
 clap-num = "1.2.0"
 byteorder = "1.5" # to serialize numbers using little/big endianness
 rand = "0.10"
-sha3 = "0.11" # to calculate integrity measurements of kernel, initramfs etc.
+sha3 = "0.12" # to calculate integrity measurements of kernel, initramfs etc.
 hybrid-array = "0.4"
 ml-kem = "0.3.2"
 aes-gcm = {version="0.11.1", features=["aes", "alloc", "rand_core"]}