search

libressl / portable

LibreSSL Portable itself. This includes the build scaffold and compatibility layer that builds portable LibreSSL from the OpenBSD source code. Pull requests or patches sent to tech@openbsd.org are welcome.
https://www.libressl.org
1.38k stars 266 forks source link

SM2/SM3/SM4 Support #636

Open pedroalbanese opened 4 years ago

pedroalbanese commented 4 years ago

Hi,

I read that LibreSSL supports SM2/SM3/SM4, but SM2 is not on the ecparam -list_curves. How to create a SM2 private key?

Thanks in advance.

botovq commented 4 years ago

On Mon, Oct 26, 2020 at 06:19:49AM -0700, pedroalbanese wrote:

I read that LibreSSL supports SM2/SM3/SM4, but SM2 is not on the ecparam -list_curves. How to create an SM2 private key?

SM3 and SM4 are supported. There is an open pull request for SM2 which I worked on and tried to get in several times but has not yet received the necessary go-ahead.

I can't give you an ETA.

ronaldtse commented 3 years ago

@botovq I just realised that this issue exist! Is there anything we can help with the original #513 ticket? (cc @ni4)

ni4 commented 3 years ago

...as well as https://github.com/libressl-portable/openbsd/pull/105. At least those should be updated due to merge conflicts, I can handle that once finished with some other things.

botovq commented 3 years ago

@ronaldtse, @ni4:

There is no need for you to do anything at this point.

I have a rebased version of opensbsd/pull/105 that I should be able to start landing in steps soon. Thus, SM2 should end up being available in the next release (October).

ronaldtse commented 3 years ago

Thank you @botovq for the great news! Very happy to see it finally merged. It was a long standing PR which would have been 2.5 years by October 😄

pedroalbanese commented 3 years ago

Sorry fe bad English. I can't understood. Is it under development or is already implemented?

Version 3.3.3 do not list it.

Thanks.

botovq commented 3 years ago

On Sun, Aug 01, 2021 at 02:57:15PM -0700, Pedro Albanese wrote:

Sorry fe bad English. I can't understood. Is it under development or is already implemented?

The code exists but is not yet part of LibreSSL.

Version 3.3.3 do not list it.

Yes, it is not yet there. It will almost surely be part of the next stable release 3.4.x.