search

ziglang / zig

General-purpose programming language and toolchain for maintaining robust, optimal, and reusable software.
https://ziglang.org
MIT License
35.37k stars 2.58k forks source link

std.crypto: Add public RSA module #19776

Open clickingbuttons opened 7 months ago

clickingbuttons commented 7 months ago

RSA is still widely used for general cryptography. As such, it deserves a public module.

  1. Move RSA functions from Certificate and tls.Client to new rsa module.
  2. Add serialization
  3. Fix side channel vulnerabilities
  4. Add key generation
voidastro4 commented 7 months ago

RSA-KEM[1] is useful to have, and due to arbitrary RSA key length it can serve as a hedge against PQC algos breaking by pushing quantum computer requirements higher.

[1] https://datatracker.ietf.org/doc/html/rfc5990

jedisct1 commented 7 months ago

RSA-KEM[1] is useful to have, and due to arbitrary RSA key length it can serve as a hedge against PQC algos breaking by pushing quantum computer requirements higher.

Post-quantum safe RSA would require 1 terabyte keys. https://cr.yp.to/papers/pqrsa-20170419.pdf

Not exactly practical.

voidastro4 commented 7 months ago

RSA-KEM[1] is useful to have, and due to arbitrary RSA key length it can serve as a hedge against PQC algos breaking by pushing quantum computer requirements higher.

Post-quantum safe RSA would require 1 terabyte keys. https://cr.yp.to/papers/pqrsa-20170419.pdf

Not exactly practical.

On the premise that no quantum computer could ever be constructed to crack them.

With MP-RSA and 1-10 MB keys you can buy decades at the very least.