EVP_DigestSign/EVP_DigestVerify are not supported by LibreSSL

[nicraMarcin]

When we can expect support for EVP_DigestSign/EVP_DigestVerify?

[concatime]

EVP_DigestSign() is a one shot operation which signs a single block of
data in one function. For algorithms that support streaming it is
equivalent to calling EVP_DigestSignUpdate() and
EVP_DigestSignFinal(). For algorithms which do not support streaming
(e.g. PureEdDSA) it is the only way to sign data.

So yeah, AFAIK, there is no other way to do so in LibreSSL.

If anything on the radar, just let me know :)

[orbea]

I just want to point out that m2crypto is affected by this issue since the following commit.

https://gitlab.com/m2crypto/m2crypto/-/commit/65997b1761b3ccbaef84cbc4ffc24585717e8b02

[kinichiro]

openbsd/src@767bfe2 committed.

[kinichiro]

@nicraMarcin I think this issue is fixed with latest LibreSSL 3.4.1.
Can you close this ?

[orbea]

With 3.4.2 and at least in the case of m2crypto this is fixed for me too (m2crypto still requires some of the unrelated OpenBSD patches).