[gnutls-devel] GnuTLS | Provide high-level KDF API (#813)

[Development of GNU's TLS library]

Nikos Mavrogiannopoulos commented:


It makes sense. Seeing how this is implemented in [openssl](https://github.com/openssl/openssl/pull/6674/files#diff-ac9bfc23ea9303f8896d38a0aa01ad6e) and PKCS#11, such an API can get very messy and hard to use if everything needs to be handled.

Not sure if it helps, but checking what model could fit for such a demanding/extensible API, the closest I see is some function similar to `gnutls_session_set_verify_cert2` with `gnutls_vdata_types_t`, but most likely on steroids.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/813#note_199708767
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190802/ae5e3699/attachment-0001.html>