briansmith / ring

Safe, fast, small crypto using Rust
Other
3.64k stars 682 forks source link

Target HPKE draft-12 #1209

Open sayrer opened 3 years ago

sayrer commented 3 years ago

The TLS WG is proposing to update the interop version with a new draft that would target cfrg-hpke-draft-08, and hopefully eliminate churn there. I think it would be best to target that version in Ring. In Rustls, we can prototype against Cloudflare's deployed ECH draft-09 code (cfrg-hpke-draft-07) using an old version of the rust-hpke crate.

See: https://mailarchive.ietf.org/arch/msg/tls/KluT9tockL5kDcIaevGOhyLWUDc/

chris-wood commented 3 years ago

Throwing in my support here. I'd love to see HPKE support land in ring.

cjpatton commented 2 years ago

Bumping this issue, as I'd also love to see this happen.

cjpatton commented 2 years ago

Are the maintainers open to a PR for adding partial support for the latest draft (HPKE-12)? An implementation of base mode and support for at least one cipher suite would be useful.

briansmith commented 2 years ago

Are the maintainers open to a PR for adding partial support for the latest draft (HPKE-12)? An implementation of base mode and support for at least one cipher suite would be useful.

Yes, that would be great as I seem to never find time to get to this. Happy to meet with you to discuss it before you start, if that would help.

cjpatton commented 2 years ago

Thanks @briansmith, I'll ping you when I have some time to start work on this. Is brian@briansmith.org a good email address (from your GH profile)

briansmith commented 2 years ago

Thanks @briansmith, I'll ping you when I have some time to start work on this. Is brian@briansmith.org a good email address (from your GH profile)

Great! Yes, that's the email address.

tanyav2 commented 2 years ago

We've started working on this now. cc @cjpatton

tanyav2 commented 2 years ago

PR implementing base mode is now up for initial review- https://github.com/briansmith/ring/pull/1462