rats-tls/crypto_wrappers: support minimal set of hash functions #147
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This comment was marked as resolved.
This comment was marked as resolved.
imlk0
force-pushed
the
interoperable-ra-tls-update-2
branch
from
499c188
to
5d44584
Compare
6 tasks
imlk0
force-pushed
the
interoperable-ra-tls-update-2
branch
3 times, most recently
from
42a16e8
to
6441a7c
Compare
In previous implements of Interoperable RA-TLS, we can only generate & verify pubkey-hash in sha-256 format. This commit brings support for verifying pubkey-hash minimal set of hash functions: sha-256 (ID 1), sha-384 (ID 7) and sha-512 (ID 8). Note that we are still only able to generate pubkey-hash in sha-256 format in RATS-TLS. In addition, in this commit, we moved part of the code from openssl/un_negotiate.c to tls_wrapper_verify_certificate_extension.c to reduce coupling. Signed-off-by: Kun Lai <me@imlk.top>
imlk0
force-pushed
the
interoperable-ra-tls-update-2
branch
from
6441a7c
to
70e557f
Compare
YangLiang3
approved these changes
Feb 1, 2023
haosanzi
approved these changes
Feb 1, 2023
Closed
15 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
In previous implements of Interoperable RA-TLS, we can only generate & verify pubkey-hash in sha-256 format. This commit brings support for verifying pubkey-hash minimal set of hash functions: sha-256 (ID 1), sha-384 (ID 7) and sha-512 (ID 8). Note that we are still only able to generate pubkey-hash in sha-256 format in RATS-TLS.
In addition, in this commit, we moved part of the code from openssl/un_negotiate.c to tls_wrapper_verify_certificate_extension.c to reduce coupling.
Signed-off-by: Kun Lai me@imlk.top