Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

crypto: Allow for ed25519/x25519 being available without ed448/x448 #9000

Open
VlkrS opened this issue Oct 28, 2024 · 0 comments · Fixed by #9136
Open

crypto: Allow for ed25519/x25519 being available without ed448/x448 #9000

VlkrS opened this issue Oct 28, 2024 · 0 comments · Fixed by #9136
Assignees
Labels
enhancement help wanted Issue not worked on by OTP; help wanted from the community team:VM Assigned to OTP team VM

Comments

@VlkrS
Copy link
Contributor

VlkrS commented Oct 28, 2024

Currently, HAVE_EDDH and HAVE_EDDSA imply that both curve 25519 and curve 448 are available.

While that is the case for OpenSSL, it isn't for LibreSSL. As a consequence, OTP doesn't make TLS1.3 (which depends on HAVE_EDDH / HAVE_EDDSA) available by default when building with LibreSSL.

For OpenBSD we are currently maintaining a set of patches to remove the need for curve 448, but it would be great if we could decouple the two by introducing something like HAVE_ED25519 / HAVE_ED448.

@IngelaAndin IngelaAndin added the team:VM Assigned to OTP team VM label Oct 29, 2024
@jhogberg jhogberg added the help wanted Issue not worked on by OTP; help wanted from the community label Nov 11, 2024
sverker added a commit that referenced this issue Dec 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement help wanted Issue not worked on by OTP; help wanted from the community team:VM Assigned to OTP team VM
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants