Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

support sm4-128-cbc for encryption of PEM blocks #42

Closed
emmansun opened this issue Apr 8, 2022 · 1 comment
Closed

support sm4-128-cbc for encryption of PEM blocks #42

emmansun opened this issue Apr 8, 2022 · 1 comment
Labels
wontfix This will not be worked on

Comments

@emmansun
Copy link
Owner

emmansun commented Apr 8, 2022

Current golang implementation supports dec/aes in pem_decrypt.go only, but RFC 1423 PEM encryption format is legacy and broken by design, so we will not extend it in smx509.

@emmansun emmansun added enhancement New feature or request wontfix This will not be worked on and removed enhancement New feature or request labels Apr 8, 2022
@emmansun
Copy link
Owner Author

emmansun commented Apr 8, 2022

Can consider to extend pkcs8 to support gm.

related discussions:

  • crypto/x509: no support for parsing encrypted PKCS8 private keys

  • crypto/x509: IsEncryptedPEMBlock returns false on valid encrypted keys. ParseRawPrivateKeyWithPassphrase fails on PKCS8 format encrypted key

@emmansun emmansun closed this as completed Apr 8, 2022
emmansun referenced this issue Apr 11, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
wontfix This will not be worked on
Projects
None yet
Development

No branches or pull requests

1 participant