Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optional Secret types via features #114

Closed
pinkforest opened this issue Mar 12, 2023 · 3 comments
Closed

Optional Secret types via features #114

pinkforest opened this issue Mar 12, 2023 · 3 comments

Comments

@pinkforest
Copy link
Contributor

pinkforest commented Mar 12, 2023

ReusableSecret is optional feature

Should StaticSecret be optional that can also make rand_core optional ?

To that matter should EphemeralSecret be optional as well ? 🤔

This was referenced Mar 12, 2023
@tarcieri
Copy link
Contributor

To me this crate's whole purpose is providing a simple interface for ECDHE.

If people want patterns that go beyond ECDHE, they should be using curve25519-dalek directly, IMO.

@pinkforest
Copy link
Contributor Author

pinkforest commented Mar 12, 2023

Yup so we can make StaticSecret optional (with it's warning) and leave EphemeralSecret as ECDHE "baseline"

But maybe another crate can do ReusableSecret StaticSecret perhaps.. with a strong warnign

E.g. we could deprecate it as optional and tell it will go away at some stage whilst keeping it for forward compat ?

This would give the existing downstream possibility to migrate at least to recent curve whilst looking at options replacing Reusable/StaticSecret if so - and we can track who uses the feature/s as now StaticSecret isn't optional we can't track who uses it.

@pinkforest
Copy link
Contributor Author

StaticSecret was made optional so this can be closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants