Bug 1365 - Add Ed25519 support using libnettle
Add Ed25519 support using libnettle
Product: unbound
Classification: Unclassified
Component: server
x86_64 Linux
: P5 enhancement
Assigned To: unbound team
Depends on:
  Show dependency treegraph
Reported: 2017-07-20 16:40 CEST by Ondřej Surý
Modified: 2017-07-24 12:47 CEST (History)
2 users (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Ondřej Surý 2017-07-20 16:40:46 CEST

libnettle supports Ed25519 since 2014 (and nettle-3.1 has some changes to the interface, so you might to want to use it), so it would be really nice if we can get Ed25519 support in libunbound when compiled with libnettle, as this is something we can have right now (as opposed to waiting for OpenSSL 1.1.1 that is waiting for TLS 1.3 to be finished).

The harder part might be the unhashed input to Ed25519 curve, but you have already solved that for OpenSSL, so it might be very easy to add :)

Comment 1 Wouter Wijngaards 2017-07-24 12:47:09 CEST
Hi Ondřej,

Thank you for the report.  It is implemented and passes test.  (with --libunbound-only).  The unhashed input did not pose an issue.

Best regards, Wouter