[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

Alexandru Ardelean added the comment: > Thanks for you detailed explanation. I kinda agree that it makes sense for > small, embedded systems like OpenWRT to reduce the size of binaries. After > all storage and memory are precious on these systems. So, OpenWrt is not as tiny as it used to be.

[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

Christian Heimes added the comment: Ah, OpenWRT. :) Thanks for you detailed explanation. I kinda agree that it makes sense for small, embedded systems like OpenWRT to reduce the size of binaries. After all storage and memory are precious on these systems. PEP 644 favors usability over

[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

Alexandru Ardelean added the comment: So, I've read through: https://www.python.org/dev/peps/pep-0644/#compatibility I also stumbled over: https://lwn.net/Articles/841664/ Which also led to: https://www.python.org/dev/peps/pep-0644/#libressl-support The answer is loud and clear now: will

[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

Alexandru Ardelean added the comment: Apologies for the slow reply. It was the end of work-day when I submitted the bug & patch. I know, not a good method, but I do what I can :) So, OpenWrt's OpenSSL does not build BLAKE2 by default. See:

[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

Christian Heimes added the comment: Python 3.10 and newer require OpenSSL 1.1.1+ with blake2, sha3, scrypt, and similar features enabled. The required feature set is specified in PEP 644, https://www.python.org/dev/peps/pep-0644/#compatibility . Python requires the features, because I want

[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

Change by Alexandru Ardelean : -- keywords: +patch pull_requests: +27500 stage: -> patch review pull_request: https://github.com/python/cpython/pull/29237 ___ Python tracker

[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

Alexandru Ardelean added the comment: Note: PKCS5_v2_scrypt_keyivgen() will not cause an error, but EVP_PBE_scrypt() will -- ___ Python tracker ___

[issue45627] OpenSSL 1.1.1 still implements some disable-flags for Blake2, Scrypt

New submission from Alexandru Ardelean : This follows update https://bugs.python.org/issue43669 Which is present in Python 3.10 Some OpenSSL 1.1.1 can be built without Blake2 support or Scrypt. SHA3 and SHAKE do not seem to have any enable/disable flags. This results in compiler errors