Version in Alire

[mgrojo]

If the version 1.0.0 in the Alire index matches the 1.0.0 tag, you have made many changes after that first release. Do you plan to update the version in Alire any time soon or are you waiting for implementing or fixing something?

[reznikmm]

I thought, nobody uses it. I can update it and release as newer version if you like.

Possible improvement could be:

• Adapt the project file to alire configuration, so alr build --release, etc works
• Rewrite a dummy RSA implementation to more advanced to avoid side-channel attacks.
• Add ECDSA using the P-256 curve and the SHA-256 hash algorithm ("ES256") by depend on SPARK NaCL, but I'm not sure if this worth to add an extra dependency in case when ES256 isn't used. May be I should create "sub-crate".

[mgrojo]

I'm no expert in security, so I cannot give an opinion on your two last points. What it would really be interesting from my point of view is that this functionality be merged with https://github.com/stcarrez/ada-security, since both libraries have incomplete functionality for JWT, and it would make sense to have a single library for that. But I guess you won't like that, since the other is part of a completely different framework, with its own utility library and so on.

If you consider the current commit as stable as 1.0.0, then a new release would be welcome. I'd like to experiment with it.

[reznikmm]

I don't think that alire should have no more then a single crate for each topic. In my opinion the concurrency is important to get crates quality. If you think that my implementation is incomplete, then please open an issue with missing features.

[mgrojo]

I hope my comment was not perceived as a critique, I was just thinking aloud. Thanks anyway for all your Ada open-source contributions.