Own amaru dependencies

[jeluard]

It makes sense to ensure all dependencies used by amaru are high quality and well-maintained.

Some dependencies are not entirely up to this standard:

• vrf-dalek
• kes-summed-ed25519

Both are not quite maintained forks of unmaintained crates. Considering those are dealing with low-level cryptographic primitives, this is problematic. Furthermore they introduce lots of older dependencies, plus some unneeded that breaks compilation for some targets (e.g. wasm).

Some options come to mind to improve this situation:

• have dedicated PRAGMA repository
• vendor them in amaru

In both cases amaru team would maintain and simplify those forks.

[abailly]

I think Pawel from my team would be very interested in working on this.

[abailly]

Ping @paweljakubas

[paweljakubas]

Hi @abailly @jeluard I will start tackling this issue in the next week and will keep you informed about what is happening on my side on very regular basis (daily). Cheers!