
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
Fast, SIMD-accelerated CRC32 (IEEE) checksum computation
extern crate crc32fast;
use crc32fast::Hasher;
let mut hasher = Hasher::new();
hasher.update(b"foo bar baz");
let checksum = hasher.finalize();
This crate contains multiple CRC32 implementations:
x86 using sse and pclmulqdq instructionsaarch64 using crc32 instructionsCalling the Hasher::new constructor at runtime will perform a feature detection to select the most
optimal implementation for the current CPU feature set.
| crate | version | variant | ns/iter | MB/s |
|---|---|---|---|---|
| crc | 1.8.1 | n/a | 4,926 | 207 |
| crc32fast (this crate) | 1.0.0 | baseline | 683 | 1499 |
| crc32fast (this crate) | 1.0.0 | pclmulqdq | 140 | 7314 |
Due to the use of SIMD intrinsics for the optimized implementations, this crate contains some amount of unsafe code.
In order to ensure memory safety, the relevant code has been fuzz tested using afl.rs with millions of iterations in both debug and release build settings. You can inspect the test setup in the fuzz sub-directory, which also has instructions on how to run the tests yourself.
On top of that, every commit is tested using an address sanitizer in CI to catch any out of bounds memory accesses.
Even though neither fuzzing nor sanitization has revealed any safety bugs yet, please don't hesitate to file an issue if you run into any crashes or other unexpected behaviour.
std (default: enabled)This library supports being built without the Rust std library, which is useful for low-level use-cases such as embedded where no operating system is available. To build the crate in a no_std context, disable the default std feature.
Note: Because runtime CPU feature detection requires OS support, the specialized SIMD implementations will be unavailable when the std feature is disabled.
nightly (default: disabled)This feature flag enables unstable features that are only available on the nightly channel. Keep in mind that when enabling this feature flag, you
might experience breaking changes when updating compiler versions.
Currently, enabling this feature flag will make the optimized aarch64 implementation available.
This project is licensed under either of
at your option.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this project by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.
FAQs
Unknown package
The cargo package crc32fast receives a total of 14,208,230 weekly downloads. As such, crc32fast popularity was classified as popular.
We found that crc32fast demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.