containers / ocicrypt

Encryption libraries for Encrypted OCI Container images
Apache License 2.0
141 stars 33 forks source link

Default the pkcs11 code to use sha256 for OAEP padding #61

Closed stefanberger closed 2 years ago

stefanberger commented 2 years ago

This PR modifies the pkcs11 code to default to sha256

lsm5 commented 2 years ago

Thanks a lot @stefanberger @lumjjb for this. Can we get new release with this please?

lumjjb commented 2 years ago

Before we release, want to make sure that we capture this change in the rust version as well @arronwy , any concerns of this from the rust side?

arronwy commented 2 years ago

Before we release, want to make sure that we capture this change in the rust version as well @arronwy , any concerns of this from the rust side?

@lumjjb pkcs11 keywrapper is not implemented in rust version yet, this default setting will not impact current rust version.