Hi Eric:
On July 9, 2010 03:55:51 pm Eric Dorman wrote:
> Hello guys, :D
>
> I am wondering how I can contribute to the development of OpenSSL in maybe
> the Cryptography and in SSL. :D
>
> I am still a beginner in coding,but I'd love to help out with inventing
> some new features or algorithms.
>
First of all, I think that your enthusiasm is laudable. But, one thing that
you should realize about cryptography software, and that is that implementers
rarely invent anything. OpenSSL is just an implementation of work that has
happened in other places (IETF PKIX, various Security Agencies and educational
institutions, etc.) So the idea with OpenSSL (and others like GNUTLS, CAPI,
NSS) is NOT to invent any new algorithms and protocols, but rather to develop
as interoperable an implementation that is true to other specifications as
possible.
> Does anyone know how I could start out helping on this project with
> developing maybe the Crypto Algorithms?
Well, a good place would be:
1: Read the relevant RFCs for:
- TLS/SSL
- OCSP
- X.509 Certificate profiles
- CMP
- S/MIME
2: Learn ASN.1
3: Learn how various types of network communications work (synchronous,
asynchronous, TCP, UDP, etc.)
Once you have the foundation, then a good place to start is in helping with
enhancing the documentation of the existing API. This serves two purposes, in
that it helps you get familiar with the existing code in sufficient depth that
you are comfortable explaining a particular function or family of functions to
someone else, and it provides valuable information to those that simply wish
to use the library, not develop for it.
Once you have worked on that for a while, keep an eye on what is coming down
the pipe from groups like PKIX or NIST, and find one area that really
interests you, learn how it works in detail, and then, using your knowledge
that you developed writing documentation, submit patches implementing that
feature to the maintainers.
Of course, if what you really want to do is learn how to invent new
cryptographic algorithms, then I would suggest getting your PhD in math with a
specialization in algorithmic analysis, and, providing you are a good citizen
of whatever country you live in, chances are that some nice gentleman in a
dark suite, sunglasses and wearing an earbud will approach you and find out if
you want to come and join them in the land of "we can't say what we're working
on, but it's REALLY interesting :)"
Have fun!
--
Patrick Patterson
President and Chief PKI Architect,
Carillon Information Security Inc.
http://www.carillon.ca
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
