crypto: Use RustCrypto's AES and AES-CTR implementations

The signal-crypto struct Aes256Ctr32 is still useful because we use a
different nonce size than RustCrypto's "full block", and we provide a
convenience constructor to specify an initial counter value.

Author: jrose-signal

Cargo.lock

@@ -10,7 +10,7 @@ authors = ["Jack Lloyd <[email protected]>"]
 edition = "2018"
 
 [dependencies]
-aes-soft = "0.6"
+aes = { version = "0.7.4", features = ["armv8", "ctr"] }
 polyval = "0.4"
 subtle = "2.3"
 cipher = "0.2"
@@ -23,9 +23,6 @@ sha2 = "0.9"
 [target.'cfg(all(target_arch = "aarch64", any(target_os = "linux")))'.dependencies]
 libc = "0.2.93" # for getauxval
 
-[target.'cfg(any(target_arch = "x86", target_arch = "x86_64"))'.dependencies]
-aesni = { version = "0.10", features = ["nocheck"] }
-
 [dev-dependencies]
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"