[gnutls-devel] GnuTLS | WIP: Add support for CNT_IMIT TLS 1.2 GOST cipher suite (!920)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Sat Feb 23 19:43:31 CET 2019


Nikos Mavrogiannopoulos started a new discussion on lib/crypto-backend.h:

>  	gnutls_mac_output_func output;
>  	gnutls_mac_deinit_func deinit;
>  	gnutls_mac_fast_func fast;
> +	gnutls_mac_copy_func copy;

That's tricky because we cannot rely for it in general. The optimized ciphers in lib/accelerated do not support it, and any registered optimizations with `gnutls_crypto_register_cipher` or `gnutls_crypto_single_cipher_register`, will not work either.

In the past the `*_cipher_register` functions have prevented a lot of optimizations and make fixes like #503 hard to impossible. Maybe we should consider marking that API deprecated during 3.6.x lifetime, and make it a no-op in 3.7.0? That would allow bringing such optimizations.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/920#note_144296182
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190223/f5430061/attachment.html>


More information about the Gnutls-devel mailing list