From: Cameron D. <cam...@gm...> - 2019-02-02 15:34:18
|
Following up on this. Openssl is actively working on their Ed25519/EdDSA implementation. Do we know that they are moving toward an engine-friendly implementation? I say this because I followed EC support in libp11 and know it had to do some tricks to get it to work with openssl. The openssl developers eventually reworked the EC_KEY interface to make it "engine friendly". This is good. My concern is we'll go through that same drawn out implementation approach with Ed25519. I've looked at the latest openssl-3.0.0-dev and I'm not sure it has the hooks to integrate cleanly with an engine. Since openssl is working this now, how do we encourage them to provide the right hooks for libp11 and engine support? Thanks, Cam |