Bug 1365 – Add Ed25519 support using libnettle

Bug 1365 - Add Ed25519 support using libnettle


Summary:	Add Ed25519 support using libnettle

Status:	RESOLVED FIXED

Product:	unbound
Classification:	Unclassified
Component:	server
Version:	unspecified
Hardware:	x86_64 Linux

Importance:	P5 enhancement
Assigned To:	unbound team

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2017-07-20 16:40 CEST by Ondřej Surý
Modified:	2017-07-24 12:47 CEST (History)
CC List:	2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Ondřej Surý 2017-07-20 16:40:46 CEST

Hi,

libnettle supports Ed25519 since 2014 (and nettle-3.1 has some changes to the interface, so you might to want to use it), so it would be really nice if we can get Ed25519 support in libunbound when compiled with libnettle, as this is something we can have right now (as opposed to waiting for OpenSSL 1.1.1 that is waiting for TLS 1.3 to be finished).

The harder part might be the unhashed input to Ed25519 curve, but you have already solved that for OpenSSL, so it might be very easy to add :)

Thanks,
Ondrej

Comment 1 Wouter Wijngaards 2017-07-24 12:47:09 CEST

Hi Ondřej,

Thank you for the report.  It is implemented and passes test.  (with --libunbound-only).  The unhashed input did not pose an issue.

Best regards, Wouter