search

tink-crypto / tink-cc

C++ implementation of Tink
https://developers.google.com/tink
Apache License 2.0
65 stars 15 forks source link

[UNIMPLEMENTED: AES-GCM-SIV is unimplemented for OpenSSL], UNIMPLEMENTED: AES-GCM-SIV is unimplemented for OpenSSL Aead primitive failed: UNIMPLEMENTED: AES-GCM-SIV is unimplemented for OpenSSL #5

Open bsergean opened 3 months ago

bsergean commented 3 months ago

Help us help you

Out tink configuration uses 2.2 with a few small build patch for a conflicting RapidJSON installation.

Bug report

We use a very up to date version of Ubuntu (24.04), but we still cannot use this encryption feature. What OS can support this ?

Apparently that feature is available in OpenSSL 3.2 / https://www.openssl.org/news/openssl-3.2-notes.html

bsergean commented 3 months ago

ps: this might be a limitation of the straight openssl build versus the boringssl build

https://github.com/tink-crypto/tink-cc/blob/ced36a4915643c527aaa079fe84a8941e90181f3/tink/aead/internal/ssl_aead.cc#L550

morambro commented 3 months ago

Hi bsergean thanks for pointing this out. AES-GCM-SIV isn't available when building with OpenSSL because the work on supporting OpenSSL in Tink predates OpenSSL 3.2. We will consider adding this for when OpenSSL 3.2 is used.

bsergean commented 3 months ago

thanks !

On Mon, Aug 5, 2024 at 12:49 AM Moreno Ambrosin @.***> wrote:

Hi bsergean https://github.com/bsergean thanks for pointing this out. AES-GCM-SIV isn't available when building with OpenSSL because the work on supporting OpenSSL in Tink predates OpenSSL 3.2. We will consider adding this for when OpenSSL 3.2 is used.

— Reply to this email directly, view it on GitHub https://github.com/tink-crypto/tink-cc/issues/5#issuecomment-2268402272, or unsubscribe https://github.com/notifications/unsubscribe-auth/AC2O6UKPIB6WXBQQUA35MMTZP4VBJAVCNFSM6AAAAABLK3NJSWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDENRYGQYDEMRXGI . You are receiving this because you authored the thread.Message ID: @.***>