Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread APOB83
OpenSSL - Dev mailing list wrote >>@Victor; Are you saying so that the patches that enabled the GOST > ciphersuite be added are not included in openSSL? If so, would that > mean > it's not possible for me to fork off openSSL and follow the GOST > template? > > Not quite. He’s

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread Dmitry Belyavsky
On Mon, Oct 23, 2017 at 4:54 PM, Salz, Rich via openssl-dev < openssl-dev@openssl.org> wrote: > ➢ Really, about a ten years ago, when we first developed GOST engine, we > have made patches, that allow to add ciphersuites dynamically. > Unfortunately, that time core team haven't accepted th

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread Salz, Rich via openssl-dev
>@Victor; Are you saying so that the patches that enabled the GOST ciphersuite be added are not included in openSSL? If so, would that mean it's not possible for me to fork off openSSL and follow the GOST template? Not quite. He’s saying that adding new crypto to TLS requires

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread Salz, Rich via openssl-dev
➢ Really, about a ten years ago, when we first developed GOST engine, we have made patches, that allow to add ciphersuites dynamically. Unfortunately, that time core team haven't accepted these patches. Do you still have them available? We might make a different choice now … -- open

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread APOB83
Thanks for the replies guys. I'm happy enough to work on a separate fork. This is a research endevour so it's not critical that I get something integrated into the master openSSL branch. I don't see there being a significant enough user base anyway for anything to get added into core libssl. @Vic

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread Victor Wagner
On Mon, 23 Oct 2017 04:51:01 -0700 (MST) APOB83 wrote: > Hi, > > I've noticed the following statement in another thread here... > > *May I suggest you have a look at the GOST engine? It does implement > the algorithm entirely in the engine. The only things added in the > OpenSSL code are th

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread Matt Caswell
On 23/10/17 12:51, APOB83 wrote: > Hi, > > I've noticed the following statement in another thread here... > > *May I suggest you have a look at the GOST engine? It does implement > the algorithm entirely in the engine. The only things added in the > OpenSSL code are the OIDs (not strictly n

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-10-23 Thread APOB83
Hi, I've noticed the following statement in another thread here... *May I suggest you have a look at the GOST engine? It does implement the algorithm entirely in the engine. The only things added in the OpenSSL code are the OIDs (not strictly necessary) and the TLS ciphersuites (I don't thin

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-09-27 Thread Matt Caswell
On 27/09/17 15:32, Byrne, Andrew wrote: > I’m working on testing some lattice based algorithms in openSSL for the > establishment of a TLS channel. I’ve investigated the potential for > developing an engine to support this as it would mean I don’t need to > touch the core openSSL code. However, I

Re: [openssl-dev] New crypto algorithms in openSSL engine

2017-09-27 Thread Dr. Stephen Henson
On Wed, Sep 27, 2017, Byrne, Andrew wrote: > Hi all, > > I'm working on testing some lattice based algorithms in openSSL for the > establishment of a TLS channel. I've investigated the potential for > developing an engine to support this as it would mean I don't need to touch > the core openSS

[openssl-dev] New crypto algorithms in openSSL engine

2017-09-27 Thread Byrne, Andrew
Hi all, I'm working on testing some lattice based algorithms in openSSL for the establishment of a TLS channel. I've investigated the potential for developing an engine to support this as it would mean I don't need to touch the core openSSL code. However, I've two blind spots which I can't find