app-crypt/sequoia-chameleon-gnupg: patch vulnerabilities (see bug), use llvm.eclass

- Patch various vulnerabilities by upgrading crates (sequoia-openpgp and buffered-reader)
- Use llvm.eclass for the Clang dep, as we need it for bindgen

Bug: https://bugs.gentoo.org/906799
Signed-off-by: Sam James <sam@gentoo.org>

3 files changed, 456 insertions, 0 deletions

diff --git a/app-crypt/sequoia-chameleon-gnupg/Manifest b/app-crypt/sequoia-chameleon-gnupg/Manifest
index a1365fd43578..d255edb5fe31 100644
--- a/app-crypt/sequoia-chameleon-gnupg/Manifest
+++ b/app-crypt/sequoia-chameleon-gnupg/Manifest
@@ -9,11 +9,13 @@ DIST atty-0.2.14.crate 5470 BLAKE2B 2db856a9e898a430258f059aeaf7c844a153293e8856
 DIST autocfg-1.1.0.crate 13272 BLAKE2B 7724055c337d562103f191f4e36cab469e578f0c51cc24d33624dea155d108a07578703766341fd6a4cc1ef52acda406e7dba1650d59115f18261281e5b40203 SHA512 df972c09abbdc0b6cb6bb55b1e29c7fed706ece38a62613d9e275bac46a19574a7f96f0152cccb0239efea04ee90083a146b58b15307696c4c81878cd12de28f
 DIST backtrace-0.3.67.crate 78564 BLAKE2B 8c77d3d182c7e1ec3840fd6c7f4214322e473ba79a71b2d11d98696f8ae4440350f3c84a891b2ec79fffde107fb2ebb99fffca202d6ed235d3abd68215a1089b SHA512 8603a3b63f4f08be315176908134243680bf1a4b0e6cb26ed81f5fc1060279126ca0ef28f209a10289e1a85214b35db6b496affd71ad21524094f3ee3acd31b6
 DIST base64-0.13.1.crate 61002 BLAKE2B 3b3a5b26e2ef18e9b4f1ede72b1bd160a1494751878e8441d463f8a514e6cb9ac859231536989e19fb1261fd864617fe31440df1b5855a0ec625521fc6fcef91 SHA512 1eb76aff9a84057f2ccb7082e9c57b015c2d71a28173089b02e7aacd09a7d311bedf0a943529611ada29f8d7b536d7ae4de256d98eee8450003a3a9a652bda4b
+DIST base64-0.21.0.crate 72180 BLAKE2B c7aeaf671bdeac67703f9c4ee1be003eb8d6f46fbaa0adf61a4da304458742938db04291d5f626115e3fcc901eb3abb3f9baf8247f6344b4d49f60a200fc6fd2 SHA512 60bcc157c6449a2160e083611e6d53e07bbff7db8cd550d9056cb804e99e990d4a20092ba4347306a3c6b6c42474a06d92cb3895125c50cef9b74cd3cbd83a2f
 DIST bindgen-0.63.0.crate 201856 BLAKE2B a99470e5878c90d0ff4cdcba5d16177eb765822041203c7224f9baf1fda23f83d92c3b9cd83759ed9ca779f9d3961509b4d7e038b716b9d68bf6563743ca8141 SHA512 43ac3067b3635c968c3a4bf6d665d633b9b80ff4eec36aad353019fc16e25c2338ea3f00a7fb077ae0dc055d10ea3ed6c304055a18dcf0c31bf980c26b110796
 DIST bit-set-0.5.3.crate 14470 BLAKE2B f6525500a494236103df2b27e964bae0b2caf718156879f972b9972fa509794bcc663c2130e3d872ecadb7ead0982b415dfa4468ef12523ee248fb1bbec2559e SHA512 c5ce7ef71559706d996505e138ce95d9f008ac3375928012a36339bfec48986ad935b384e2d21fa0d505d4cf98bd3e93be15955ecd9607d253b8a276351334c6
 DIST bit-vec-0.6.3.crate 19927 BLAKE2B f5bd3bb9c87fdf3b206739b74df20cab50a1a45af3a58b2642a5a061c26207884be58ef8369a3cd06dfd3615bff0ce15915fdd4b6b6f03facc4a0f86c0b7e910 SHA512 b4b4a82c80d0ff13527ae4fff449ac9c1c7bc519c013af6ea3428348e0e5b9306b725c0a13a42d7d9dcf0f895a9eee0c63695a2503eb7fd2200083c9ea3a9aa8
 DIST bitflags-1.3.2.crate 23021 BLAKE2B eb990bb27b2bdeb66fd7212ce582cb36e1c616debbac85df642d0c82b25439e6bf9b1e811fac76b59e58ea3c1bbea6170d03a61e8f9a395e4334a0e2e2987eda SHA512 3c698f757b5cc62f815f9a1cce365c3d2dd88e4db71f331dff8bba86c2865f755b81cb4c9bfc59bd86b7643b0943f9e09a7c4f8ad75eb2ab0e714803d0129f62
 DIST buffered-reader-1.1.4.crate 61347 BLAKE2B ff722a8346bb4b644c0b463168337620c82e28763c2251afe7bb14ddbb981217b83495d18b5f6389beb7e268045d6a3daa9f9ad5703e2eac9fb90075a235ee15 SHA512 1d5cffd9c02f0f4cdb550764c75cd22df44012264710530fb36a9c77a5d64d803c14ce7a4f1244511b3895147e2f70f9dd8e7ad705222712f9846459ff36b746
+DIST buffered-reader-1.2.0.crate 62127 BLAKE2B 8ca2e10f69121a08169e082b34e2412502673f24f2c373c66c49e24160b340e9078fe16b9dccc4f1cc51f3f0867d9e605c04bb002abb61b8891618b95f79e8e3 SHA512 4e7f9d75720b10a04577220ead4ca96e0c34a573469f80a50288e156d7aa99a1820850aa69c3f2db0505d0204bbd3aa6bd4b5823925481f0358d13936ad54770
 DIST bumpalo-3.12.0.crate 81604 BLAKE2B 2370094f0c23a3e9b75c8e523e54637189543d9df90ae7ddc349d316054d3d1abd1319e51cf1578f1630be0673fd7f65d130469b2729aa32617372e8bc5dd5f7 SHA512 37f2228f251340e82c27f2b34da2af6eb520077b3809331547cbe4887c0b4791b1a7d75a017decccef162cd02a088d504214b7a44b484a7d93eb6a278b329ee4
 DIST bytes-1.4.0.crate 58080 BLAKE2B 99a9d343424e04649bd209bf2a6c3a089a6cc9fdb799968f8c3a711189328e4499df2e09cc6a2a8ce05d2cc668149b364cf30cb3b09e96e21d50a39519c2f49f SHA512 502c63b9fdcd36ed28ede55a63cd359dc7b28658ecd43020511d17d48d7c34e45aa8ff7e4b17770f12197451040c2b724fe68d2aa3ab4f81c9171d052f2aa000
 DIST bzip2-0.4.4.crate 34197 BLAKE2B b69f8ad38b44eb4912b33d53467492b0ebe6ed740451bdfe9133e71c47a8dbd85b1110a9607c4cc627fbabc44cd86fe0396bb545864632ffb6169f9cfa547b6c SHA512 9cd2b9159bd0b42ac908ecad41f0a737272af94ae0d6dcfe182d2f44bcea4632d32b0456f02322047ea9d6f46377db6cd083f468782bccd6126bcc75cb852555
@@ -137,7 +139,9 @@ DIST miniz_oxide-0.6.2.crate 54536 BLAKE2B 8127ebec5a2cee1c2101d9533da573e01ef1a
 DIST mio-0.8.5.crate 93993 BLAKE2B 6c20d66c3b5753234c0ab0461642b63e84383128db775c6e01d50bade5a69081f7da1626f87244c2c45c2451690e8cdca02e2d1ca20f279ba6f8401fb006c7cc SHA512 e92bbc1d06ad8d4311d76f878d514d0c91e47de2c511c54bb53096ad689012c3d1ffeec18e2de05a5f66c03ad83150cd45d31edd203e9b9522ece13be00bcede
 DIST native-tls-0.2.11.crate 29008 BLAKE2B 594511c364e639e309f32f37ae20ecfc5ddeeb39c3f7180c5f3f2cf304d8c323b977af933ffe70cce696a5a63e17c5fa7ddb119d46fc3db819a28e31a388640b SHA512 7e77959932f2859757f1aeb37b78fdd459b7b6fd02424f4b7399525b94c21d1f499a718775503b8f3dfe3b4b740e1cfbee77052a2ebd0994468addb3fa665e6c
 DIST nettle-7.2.0.crate 574708 BLAKE2B 27ed4dd6f5c1543be9dc00f10b955607b86808239449d56cbd47a1417685638b94f37752d3e854968f93273216213bb0e7a66b6339ae21c318b679f4a05c7a32 SHA512 a1c8480d2ddccbc41c5cd164f769f7c56a7f37d699b7c5025e8fb67c56319cb6a4209d529a1dd53da4c063342464532d88aef47cf7e2d2feb509ebb27a307a1d
+DIST nettle-7.3.0.crate 580277 BLAKE2B f70a60e47a633a399843a7d2cae466c3695e09f442968009c93a26aa40a806966c693765cd3f9e361e3e8550efd54e4c72d7ac3263eb159da850f55b7a8c52f0 SHA512 658b7c72eaa86c574ccec8c10ea4aa37480c1d7b92711a96274c7ea75d89c96d669d2e05145598c835a1f34ffb1b2be005cef278f7bf103b8d2c8b8d96213cb6
 DIST nettle-sys-2.1.1.crate 28024 BLAKE2B 479bc5479a835abf0d959835cd2b57913180a9d0022a78af01f295f5db864ba82e3b240b63fd54fbcb51794f937595baa1fb0e41319a291ea5ed8707fa524dea SHA512 a9a299ae3e55d54603430fdd46c0b26d07ce21ebd94c759e76407ac97f5b9568808bdcf43d4981b550f6a416860e703314867a25939d985418bde922644bc288
+DIST nettle-sys-2.2.0.crate 28559 BLAKE2B 87da765ad2e88e595a6fbaad4f3d972e72c0a1fe4b5e16efd91e9c0f601c307c3891586f27e9f6096224775253479a4e63b37f2c73133e5ee9122b53ca863625 SHA512 db72ab5f0bfd79230489d1310ba6d91ff55ec8d7229f0c21cc309fcf50aba6c8db44fda946c01642b4b9d348c7d113d77d3c13f7cc395f7fde7e9c50cbb6e90f
 DIST new_debug_unreachable-1.0.4.crate 2561 BLAKE2B 5c9831b04e2a44b2dd27816df0a331a8108991a84ebdfefe4e42f325ec3519ee50e89a99d490020a65a3d75acc371316c2253d2c6382453a0b15f4c3d5b96520 SHA512 6f964bb322aa8f2ff92078381dd720527600c6449e237b703278cbcf47b39a2581fddfc2f34ebb7cf31229e33d58de48bb5050e083fec6dad9aefddc1d771c85
 DIST nibble_vec-0.1.0.crate 11796 BLAKE2B 2e80648e4e18d17fdd41671acc1e166a8337fe1ec1765e5a7f08c19fbcb23ce43b11d1cb396b867b9a2c0ae58e30225d9b13fa337793d8c32abf99969e7c11af SHA512 21bc50bfa5f11f50b19a20691346f098db083ceb6891faed72fb91d2e911cee060ad4d19ee1c98792c5809cb6ab2bd65061bc051a1dea75d9096060b87497f67
 DIST nix-0.18.0.crate 209962 BLAKE2B 3ff822e3d49a6c477d5da3702fc88bbe270202acb4f7c449a78969ada9b8fc8855a90ee194bd2943dd27c28286b88e1b22a6003e08260e19f7c8ed6036bc2891 SHA512 b86660bfa2533fdfb945a3ef840c692b5d96108e3e73b76d6489b65039cde87ae04935d2f10878cab1ea38f039083aebf4ec9b2bb6ba66ee204be700e3e96581
@@ -200,6 +204,7 @@ DIST sequoia-chameleon-gnupg-0.2.0-v0.2.0.tar.bz2 298591 BLAKE2B 7ae8a1187028a3e
 DIST sequoia-ipc-0.30.1.crate 4502011 BLAKE2B 5347054fa19f41a205820d8a9df00ae0c21cf183ec41c7d6eaadbbd7fcc5fef2d88cafee3774afcf1d715e89304e7c2378304af71e7a8b308849dcc86bf53e4e SHA512 ac3eeb3000951cb2d5c9864c6c59b92dc80f2fe859a57db254ff36db3063e85d0a0bf021b8dccf18bbeaa92d25b229baf7b0c86313b9c7584eb6eed9cbe01c99
 DIST sequoia-net-0.26.0.crate 32385 BLAKE2B 8fd7f257ca57082aaadba97a1a1727a193ef3a52caafbb427f8813edc23f8165402c22bc687c2ee7ca5981f7d94d1550b6251c566778835bd465c3db447bf5de SHA512 dfc72a28ec42cd0fc160e5999a9b86d65ccfe54e8f67f6590129ec2e0c0654f48e79bb522c4f7c96aae663921c572d17fed1279ede1d1077b3ae724bd25c4e13
 DIST sequoia-openpgp-1.13.0.crate 2912398 BLAKE2B a6ce2f437d5d11ed838aef15b4a0c8cc5fd11cf5fd478a61c81643788cb23ece375a77d7c1808bef3aeeacd58f66a8150e14d52d8aac1c68b8b36f7d72b37749 SHA512 45ff000500e9919216a543981cc3b0eb6a2e354ff8bf76bf5829b0a98344766b88b7d25bc174649d85d92a14b6cbf12ce56f54f6fedd4ff9c79ba662a9e79ef1
+DIST sequoia-openpgp-1.16.0.crate 2937534 BLAKE2B 127ff229f0374fc07fe30dffa98a18c716a332057bb90177ef23aa55dfbf102ede058b92a19930cf1760ecbc3f3f3604df5be1779ecdcb6a11e4c28af8e1b706 SHA512 0f51a494b8c011b77e98adef1747ba84eb36bf1b629c02341c10cf33b86cc2a7da9a99f57b65f44f23f8a2969fc83a1326288133b904ee5ebf54078034f6d5fc
 DIST sequoia-openpgp-mt-0.1.0.crate 29965 BLAKE2B 7aaa128f00728ddfafec2a3cc05c7fe8961a1536c586196d4829377cf647e4c2693b920a91f6cb83db05a38379c8427b26fbed79f8127cf02c4c943d1fe8cd6b SHA512 ff3e41731d37cb0897bac740059086e54d8c4015b05867f8f51e94e8bbd05afe346039b54be7140bd716425e69d55f7642c07b3ecef1f9da188259e73b19c9dd
 DIST sequoia-policy-config-0.5.0.crate 41914 BLAKE2B 342f814370cd44e56d929991bf4d24b7ec03b472f608b936d98665bab67e3645739b36d91042e01a9feccdd52fa70f05a7bb4b59cde4b6be8fb93277b50f5880 SHA512 93b1b6f1f84b2abd74089819d972a9c5ad3d30e2a43eeeb0634d92934802c6ab03eb0ef51487ef3d13894b2863b78c1cc72dcafa51f57a03ddbff8ca5fa0167b
 DIST sequoia-wot-0.4.1.crate 1047172 BLAKE2B 8235b5bcf5c9ec6fdb309c4a4a11c489bc17cbec28e6be50ab266ebfb255f84606947aaf8d50b43712a422ac2ee585996b28bee94847718a1cbb5dcaf07458ee SHA512 188aeffb2a64731bff37a6b461066dda1fc630fe3eb3f04644198c7c7998a43fd6a0f0e376d489debb1a1bda13245c3a66c3b9134a38b8dc5356116ef3647bee
diff --git a/app-crypt/sequoia-chameleon-gnupg/files/sequoia-chameleon-gnupg-0.2.0-sec-fixes.patch b/app-crypt/sequoia-chameleon-gnupg/files/sequoia-chameleon-gnupg-0.2.0-sec-fixes.patch
new file mode 100644
index 000000000000..cd5753829d1f
--- /dev/null
+++ b/app-crypt/sequoia-chameleon-gnupg/files/sequoia-chameleon-gnupg-0.2.0-sec-fixes.patch
@@ -0,0 +1,104 @@
+https://lists.sequoia-pgp.org/hyperkitty/list/announce@lists.sequoia-pgp.org/thread/SN2E3QRT4DMQ5JNEK6VIN6DJ5SH766DI/
+--- a/Cargo.lock
++++ b/Cargo.lock
+@@ -102,6 +102,12 @@ version = "0.13.1"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "9e1b586273c5702936fe7b7d6896644d8be71e6314cfe09d3167c95f712589e8"
+ 
++[[package]]
++name = "base64"
++version = "0.21.0"
++source = "registry+https://github.com/rust-lang/crates.io-index"
++checksum = "a4a4ddaa51a5bc52a6948f74c06d20aaaddb71924eab79b8c97a8c556e942d6a"
++
+ [[package]]
+ name = "bindgen"
+ version = "0.63.0"
+@@ -145,9 +151,9 @@ checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+ 
+ [[package]]
+ name = "buffered-reader"
+-version = "1.1.4"
++version = "1.2.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "d0dd286184b392a1ce6b3deecd073f0330df194bf935b87f852147d50d0d2d18"
++checksum = "66d3bea5bcc3ecc38fe5388e6bc35e6fe7bd665eb3ae9a44283e15b91ad3867d"
+ dependencies = [
+  "bzip2",
+  "flate2",
+@@ -1310,21 +1316,22 @@ dependencies = [
+ 
+ [[package]]
+ name = "nettle"
+-version = "7.2.0"
++version = "7.3.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "f5d193a809310369c5d16e45bc0a88cb27935edd5d3375bcfc2371b167694035"
++checksum = "b9fdccf3eae7b161910d2daa2f0155ca35041322e8fe5c5f1f2c9d0b12356336"
+ dependencies = [
+  "getrandom 0.2.8",
+  "libc",
+  "nettle-sys",
+  "thiserror",
++ "typenum",
+ ]
+ 
+ [[package]]
+ name = "nettle-sys"
+-version = "2.1.1"
++version = "2.2.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "5df7cd7e8d5d2997055f31318d1ec648c84886e662bbef7b4a60e3cbc899522b"
++checksum = "b5e81c347b9002da0b6b0c4060993c280e99eb14b42ecf65a2fefcd6eb3d8a73"
+ dependencies = [
+  "bindgen",
+  "cc",
+@@ -1873,7 +1880,7 @@ name = "sequoia-chameleon-gnupg"
+ version = "0.2.0"
+ dependencies = [
+  "anyhow",
+- "base64",
++ "base64 0.13.1",
+  "buffered-reader",
+  "chrono",
+  "diff",
+@@ -1937,7 +1944,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
+ checksum = "7cca7e201e65a2acd3fbbb6004f843e622959f00afbbe8f3308a7997c9784dfa"
+ dependencies = [
+  "anyhow",
+- "base64",
++ "base64 0.13.1",
+  "futures-util",
+  "http",
+  "hyper",
+@@ -1957,25 +1964,26 @@ dependencies = [
+ 
+ [[package]]
+ name = "sequoia-openpgp"
+-version = "1.13.0"
++version = "1.16.0"
+ source = "registry+https://github.com/rust-lang/crates.io-index"
+-checksum = "70af2f594bf5261eb87be5060db1e40d6445686d2bb3ec41c014cf53701130a2"
++checksum = "30efff3f9930e85b4284e76bbdad741f36412dfb1e370efd0de5866ae1a11dfc"
+ dependencies = [
+  "anyhow",
+- "base64",
++ "base64 0.21.0",
+  "buffered-reader",
+  "bzip2",
+  "chrono",
+  "dyn-clone",
+  "flate2",
+  "getrandom 0.2.8",
+- "idna 0.3.0",
++ "idna 0.2.3",
+  "lalrpop",
+  "lalrpop-util",
+  "lazy_static",
+  "libc",
+  "memsec",
+  "nettle",
++ "once_cell",
+  "rand 0.7.3",
+  "regex",
+  "regex-syntax",
diff --git a/app-crypt/sequoia-chameleon-gnupg/sequoia-chameleon-gnupg-0.2.0-r1.ebuild b/app-crypt/sequoia-chameleon-gnupg/sequoia-chameleon-gnupg-0.2.0-r1.ebuild
new file mode 100644
index 000000000000..6c1708514742
--- /dev/null
+++ b/app-crypt/sequoia-chameleon-gnupg/sequoia-chameleon-gnupg-0.2.0-r1.ebuild
@@ -0,0 +1,347 @@
+# Copyright 2023 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# Autogenerated by pycargoebuild 0.6.2
+
+EAPI=8
+
+CRATES="
+	addr2line-0.19.0
+	adler-1.0.2
+	aho-corasick-0.7.20
+	android_system_properties-0.1.5
+	anyhow-1.0.68
+	ascii-canvas-3.0.0
+	async-trait-0.1.64
+	atty-0.2.14
+	autocfg-1.1.0
+	backtrace-0.3.67
+	base64-0.13.1
+	base64-0.21.0
+	bindgen-0.63.0
+	bit-set-0.5.3
+	bit-vec-0.6.3
+	bitflags-1.3.2
+	buffered-reader-1.2.0
+	bumpalo-3.12.0
+	bytes-1.4.0
+	bzip2-0.4.4
+	bzip2-sys-0.1.11+1.0.8
+	capnp-0.14.11
+	capnp-futures-0.14.2
+	capnp-rpc-0.14.1
+	cc-1.0.79
+	cexpr-0.6.0
+	cfg-if-0.1.10
+	cfg-if-1.0.0
+	chrono-0.4.23
+	clang-sys-1.4.0
+	clap-4.0.32
+	clap_complete-4.0.7
+	clap_derive-4.0.21
+	clap_lex-0.3.0
+	clap_mangen-0.2.6
+	codespan-reporting-0.11.1
+	core-foundation-0.9.3
+	core-foundation-sys-0.8.3
+	crc32fast-1.3.2
+	crossbeam-0.8.2
+	crossbeam-channel-0.5.6
+	crossbeam-deque-0.8.2
+	crossbeam-epoch-0.9.13
+	crossbeam-queue-0.3.8
+	crossbeam-utils-0.8.14
+	crunchy-0.2.2
+	ctor-0.1.26
+	cxx-1.0.89
+	cxx-build-1.0.89
+	cxxbridge-flags-1.0.89
+	cxxbridge-macro-1.0.89
+	data-encoding-2.3.3
+	diff-0.1.13
+	digest-0.9.0
+	dirs-4.0.0
+	dirs-next-2.0.0
+	dirs-sys-0.3.7
+	dirs-sys-next-0.1.2
+	dyn-clone-1.0.10
+	edit-distance-2.1.0
+	either-1.8.1
+	ena-0.14.0
+	endian-type-0.1.2
+	enum-as-inner-0.5.1
+	enumber-0.3.0
+	errno-0.2.8
+	errno-dragonfly-0.1.2
+	fastrand-1.8.0
+	fd-lock-3.0.9
+	filetime-0.2.19
+	fixedbitset-0.4.2
+	flate2-1.0.25
+	fnv-1.0.7
+	foreign-types-0.3.2
+	foreign-types-shared-0.1.1
+	form_urlencoded-1.1.0
+	fs2-0.4.3
+	futures-0.3.26
+	futures-channel-0.3.26
+	futures-core-0.3.26
+	futures-executor-0.3.26
+	futures-io-0.3.26
+	futures-macro-0.3.26
+	futures-sink-0.3.26
+	futures-task-0.3.26
+	futures-util-0.3.26
+	generic-array-0.14.6
+	getrandom-0.1.16
+	getrandom-0.2.8
+	gimli-0.27.1
+	glob-0.3.1
+	h2-0.3.15
+	half-1.8.2
+	hashbrown-0.12.3
+	heck-0.4.1
+	hermit-abi-0.1.19
+	hermit-abi-0.2.6
+	home-dir-0.1.0
+	hostname-0.3.1
+	http-0.2.8
+	http-body-0.4.5
+	httparse-1.8.0
+	httpdate-1.0.2
+	hyper-0.14.23
+	hyper-tls-0.5.0
+	iana-time-zone-0.1.53
+	iana-time-zone-haiku-0.1.1
+	idna-0.2.3
+	idna-0.3.0
+	indexmap-1.9.2
+	instant-0.1.12
+	io-lifetimes-1.0.5
+	ipconfig-0.3.1
+	ipnet-2.7.1
+	is-terminal-0.4.2
+	itertools-0.10.5
+	itoa-1.0.5
+	js-sys-0.3.61
+	lalrpop-0.19.8
+	lalrpop-util-0.19.8
+	lazy_static-1.4.0
+	lazycell-1.3.0
+	libc-0.2.139
+	libloading-0.7.4
+	link-cplusplus-1.0.8
+	linked-hash-map-0.5.6
+	linux-raw-sys-0.1.4
+	lock_api-0.4.9
+	log-0.4.17
+	lru-cache-0.1.2
+	match_cfg-0.1.0
+	matches-0.1.10
+	memchr-2.5.0
+	memoffset-0.7.1
+	memsec-0.6.2
+	minimal-lexical-0.2.1
+	miniz_oxide-0.6.2
+	mio-0.8.5
+	native-tls-0.2.11
+	nettle-7.3.0
+	nettle-sys-2.2.0
+	new_debug_unreachable-1.0.4
+	nibble_vec-0.1.0
+	nix-0.18.0
+	nom-7.1.3
+	num-integer-0.1.45
+	num-traits-0.2.15
+	num_cpus-1.15.0
+	object-0.30.3
+	once_cell-1.17.0
+	openpgp-cert-d-0.1.0
+	openssl-0.10.45
+	openssl-macros-0.1.0
+	openssl-probe-0.1.5
+	openssl-sys-0.9.80
+	os_str_bytes-6.4.1
+	parking_lot-0.12.1
+	parking_lot_core-0.9.7
+	peeking_take_while-0.1.2
+	percent-encoding-2.2.0
+	petgraph-0.6.2
+	phf_shared-0.10.0
+	pin-project-lite-0.2.9
+	pin-utils-0.1.0
+	pkg-config-0.3.26
+	ppv-lite86-0.2.17
+	precomputed-hash-0.1.1
+	proc-macro-error-1.0.4
+	proc-macro-error-attr-1.0.4
+	proc-macro2-1.0.50
+	quick-error-1.2.3
+	quote-1.0.23
+	radix_trie-0.2.1
+	rand-0.7.3
+	rand-0.8.5
+	rand_chacha-0.2.2
+	rand_chacha-0.3.1
+	rand_core-0.5.1
+	rand_core-0.6.4
+	rand_hc-0.2.0
+	rayon-1.6.1
+	rayon-core-1.10.2
+	redox_syscall-0.2.16
+	redox_users-0.4.3
+	regex-1.7.1
+	regex-syntax-0.6.28
+	remove_dir_all-0.5.3
+	resolv-conf-0.7.0
+	ring-0.16.20
+	roff-0.2.1
+	rustc-demangle-0.1.21
+	rustc-hash-1.1.0
+	rustix-0.36.7
+	rustversion-1.0.11
+	schannel-0.1.21
+	scopeguard-1.1.0
+	scratch-1.0.3
+	security-framework-2.8.2
+	security-framework-sys-2.8.0
+	sequoia-ipc-0.30.1
+	sequoia-net-0.26.0
+	sequoia-openpgp-1.16.0
+	sequoia-openpgp-mt-0.1.0
+	sequoia-policy-config-0.5.0
+	sequoia-wot-0.4.1
+	serde-1.0.152
+	serde_cbor-0.11.2
+	serde_derive-1.0.152
+	sha1collisiondetection-0.2.6
+	shlex-1.1.0
+	siphasher-0.3.10
+	slab-0.4.7
+	smallvec-1.10.0
+	socket2-0.4.7
+	spin-0.5.2
+	string_cache-0.8.4
+	strsim-0.10.0
+	syn-1.0.107
+	tempfile-3.3.0
+	term-0.7.0
+	termcolor-1.2.0
+	terminal_size-0.2.3
+	thiserror-1.0.38
+	thiserror-impl-1.0.38
+	time-0.1.45
+	time-0.3.17
+	time-core-0.1.0
+	tiny-keccak-2.0.2
+	tinyvec-1.6.0
+	tinyvec_macros-0.1.0
+	tokio-1.25.0
+	tokio-macros-1.8.2
+	tokio-native-tls-0.3.0
+	tokio-util-0.7.4
+	toml-0.5.11
+	tower-service-0.3.2
+	tracing-0.1.37
+	tracing-attributes-0.1.23
+	tracing-core-0.1.30
+	trust-dns-client-0.22.0
+	trust-dns-proto-0.22.0
+	trust-dns-resolver-0.22.0
+	try-lock-0.2.4
+	typenum-1.16.0
+	unicode-bidi-0.3.10
+	unicode-ident-1.0.6
+	unicode-normalization-0.1.22
+	unicode-width-0.1.10
+	unicode-xid-0.2.4
+	untrusted-0.7.1
+	url-2.3.1
+	vcpkg-0.2.15
+	version_check-0.9.4
+	want-0.3.0
+	wasi-0.10.0+wasi-snapshot-preview1
+	wasi-0.11.0+wasi-snapshot-preview1
+	wasi-0.9.0+wasi-snapshot-preview1
+	wasm-bindgen-0.2.84
+	wasm-bindgen-backend-0.2.84
+	wasm-bindgen-macro-0.2.84
+	wasm-bindgen-macro-support-0.2.84
+	wasm-bindgen-shared-0.2.84
+	web-sys-0.3.61
+	widestring-0.5.1
+	winapi-0.3.9
+	winapi-i686-pc-windows-gnu-0.4.0
+	winapi-util-0.1.5
+	winapi-x86_64-pc-windows-gnu-0.4.0
+	windows-sys-0.42.0
+	windows-sys-0.45.0
+	windows-targets-0.42.1
+	windows_aarch64_gnullvm-0.42.1
+	windows_aarch64_msvc-0.42.1
+	windows_i686_gnu-0.42.1
+	windows_i686_msvc-0.42.1
+	windows_x86_64_gnu-0.42.1
+	windows_x86_64_gnullvm-0.42.1
+	windows_x86_64_msvc-0.42.1
+	winreg-0.10.1
+	xxhash-rust-0.8.6
+	zbase32-0.1.2
+"
+
+LLVM_MAX_SLOT=16
+inherit cargo llvm xdg-utils
+
+DESCRIPTION="Sequoia's reimplementation of the GnuPG interface"
+HOMEPAGE="https://sequoia-pgp.org/"
+SRC_URI="
+	https://gitlab.com/sequoia-pgp/sequoia-chameleon-gnupg/-/archive/v${PV}/${P}-v${PV}.tar.bz2
+	$(cargo_crate_uris)
+"
+S="${WORKDIR}"/${PN}-v${PV}-a841c191a450b7d67580e079296cd09743fe43fe
+
+LICENSE="GPL-3+"
+# Dependent crate licenses
+LICENSE+="
+	Apache-2.0 BSD Boost-1.0 CC0-1.0 ISC LGPL-2+ LGPL-3+ MIT
+	Unicode-DFS-2016
+	|| ( GPL-2 GPL-3 LGPL-3 )
+"
+SLOT="0"
+KEYWORDS="~amd64 ~arm64"
+# See e.g. https://gitlab.com/sequoia-pgp/sequoia-chameleon-gnupg/-/issues/8
+# Even though that's fixed as of >0.2.0, tests still completely fail inside
+# Portage. Not yet sure why/how. They do better outside, although some fail
+# still then.
+RESTRICT="test"
+
+DEPEND="
+	dev-libs/gmp:=
+	dev-libs/nettle:=
+"
+RDEPEND="${DEPEND}"
+# Needed for bindgen
+BDEPEND="<sys-devel/clang-$((${LLVM_MAX_SLOT} + 1))"
+
+QA_FLAGS_IGNORED="usr/bin/gpg-sq usr/bin/gpgv-sq"
+
+PATCHES=(
+	"${FILESDIR}"/${P}-tests.patch
+	"${FILESDIR}"/${P}-sec-fixes.patch
+)
+
+llvm_check_deps() {
+	has_version -b "sys-devel/clang:${LLVM_SLOT}"
+}
+
+src_test() {
+	export GNUPGHOME="${T}"/.gnupg
+	export REAL_GPG_BIN="${BROOT}"/usr/bin/gpg
+	export REAL_GPGV_BIN="${BROOT}"/usr/bin/gpgv
+
+	mkdir "${GNUPGHOME}" || die
+	chmod 700 "${GNUPGHOME}" || die
+
+	xdg_environment_reset
+	RUST_BACKTRACE=full cargo_src_test -vv
+}