From f5d1d32f58866a4db864851802154eefc2912412 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 5 Oct 2026 11:51:08 +0000
Subject: [PATCH] Update Rust crate sha3 to 0.12

---
 security-monitor/Cargo.lock | 21 +++++++++++++++++++--
 security-monitor/Cargo.toml |  2 +-
 2 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/security-monitor/Cargo.lock b/security-monitor/Cargo.lock
index 56a530d..035ab6c 100644
--- a/security-monitor/Cargo.lock
+++ b/security-monitor/Cargo.lock
@@ -315,7 +315,7 @@ dependencies = [
  "kem",
  "module-lattice",
  "rand_core",
- "sha3",
+ "sha3 0.11.0",
 ]
 
 [[package]]
@@ -479,7 +479,7 @@ dependencies = [
  "pointers_utility",
  "riscv-decode",
  "riscv_cove_tap",
- "sha3",
+ "sha3 0.12.0",
  "spin",
  "thiserror-no-std",
 ]
@@ -509,6 +509,17 @@ dependencies = [
  "keccak",
 ]
 
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest",
+ "keccak",
+ "sponge-cursor",
+]
+
 [[package]]
 name = "shlex"
 version = "2.0.1"
@@ -521,6 +532,12 @@ version = "0.12.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0134f9043ed38b087ac4f7d4af44c79e2c9e5094421fe3164f435ce585953b10"
 
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
 [[package]]
 name = "static_assertions"
 version = "1.1.0"
diff --git a/security-monitor/Cargo.toml b/security-monitor/Cargo.toml
index a410ce4..2a3fbd8 100644
--- a/security-monitor/Cargo.toml
+++ b/security-monitor/Cargo.toml
@@ -31,7 +31,7 @@ spin = {version="0.12", default-features = false, features = ["once", "rwlock",
 riscv_cove_tap = {path = "rust-crates/riscv_cove_tap", features = ["parser"]}
 
 # Used to measure confidential VM, required for attestation
-sha3 = { version = "0.11", default-features = false }
+sha3 = { version = "0.12", default-features = false }
 hybrid-array = { version = "0.4", default-features = false }
 
 # provides macros that help removing boilerplate code in the rust error handling