Enabling signing of arbitrary data

open-quantum-safe / openssl

UNSUPPORTED Fork of OpenSSL 1.1.1 that includes prototype quantum-resistant algorithms and ciphersuites based on liboqs PLEASE SWITCH TO OQS-Provider for OpenSSL 3

https://openquantumsafe.org/

Other

291 stars 125 forks source link

Enabling signing of arbitrary data #429

Closed opencrypto closed 1 year ago

opencrypto commented 1 year ago

This patch provides two different different changes:

(bb172fb) Enables the use of a EVP_md_null together with NULL in OQS/PQC pkey meth for setting the digest via the CTRL interface
(fc7ab7d) Enables the use of EVP_PKEY_sign() and EVP_PKEY_verify() with OQS/PQC algorithms by porting the code from the pkey_oqs digestsign() and pkey_oqs_digestverify() into pkey_sign() and pkey_verify() of the pkey meth.

Checklist

[ ] documentation is added or updated
[ ] tests are added or updated

baentsch commented 1 year ago

Just a quick question while this is still a draft: Can we safely assume the PR will be completed with a test (that didn't work before and works with PR)? Edit/Add: FWIW, this may be a good place where to add the new tests.

baentsch commented 1 year ago

@opencrypto Do you intend to move this PR forward (incl. test and documentation) or shall we close this given the long time this is "dormant"?

dstebila commented 1 year ago

The OpenSSL project has indicated that OpenSSL 1.1.1 will reach end-of-life in September 2023. As such, we are discontinuing development on OQS-OpenSSL 1.1.1, and recommend all users switch to OpenSSL 3 and the OQS Provider for OpenSSL 3, which provides all the same functionality that OQS-OpenSSL 1.1.1 does. Hence we are closing open pull requests and issues in OQS-OpenSSL 1.1.1 as won't-fix.