search

raphw / byte-buddy

Runtime code generation for the Java virtual machine.
https://bytebuddy.net
Apache License 2.0
6.23k stars 804 forks source link

[Question] Does byte-buddy use any encryption libraries? #1706

Closed sf-sbalain closed 2 weeks ago

sf-sbalain commented 2 weeks ago

I see from this issue #1606 that byte-buddy and agent libraries are considered FIPS compliant since they do not implement encryption. Question: Why does byte-buddy download crypto librarycom.google.com.tink here though it does not use it? Byte-buddy also refers to net.i2p.crypto:eddsa here but again I find no reference to it.

NOTE: Net.i2p.crypto.eddsa is a Java implementation of EdDSA, a digital signature scheme that uses a variant of elliptic curve cryptography based on Twisted Edwards curves.

raphw commented 2 weeks ago

That's part of the Maven and Gradle builds for uploading and signing artifacts, but not of Byte Buddy itself.

sf-sbalain commented 2 weeks ago

Thanks.