rovarga opened a new issue, #812:
URL: https://github.com/apache/mina-sshd/issues/812

   ### Description
   
   Improve EdDSA support by referencing a fixed alternative to 
net.i2p.crypto:eddsa, available in [in Maven 
Central](https://central.sonatype.com/artifact/com.bloxbean.cardano/net-i2p-crypto-eddsa).
   
   ### Motivation
   
   The current dependency has:
   
   - a security problem, https://www.cve.org/CVERecord?id=CVE-2020-36843,
   - a dependency on sun.security as noted in #657 
   
   Both of these are fixed in the above artifact, which seems to be matching 
the release here https://github.com/bloxbean/ed25519-java/releases/tag/v0.3.1, 
at least to the best [of my 
knowledge](https://lf-opendaylight.atlassian.net/browse/NETCONF-1503?focusedCommentId=48384).
   
   ### Alternatives considered
   
   _No response_
   
   ### Additional context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to