Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can I Replace LibTomCrypt with OpenSSL? #256

Closed
isinglever opened this issue Oct 19, 2023 · 3 comments
Closed

Can I Replace LibTomCrypt with OpenSSL? #256

isinglever opened this issue Oct 19, 2023 · 3 comments

Comments

@isinglever
Copy link

Hi, I use deopbear as ssh server in my project. But I want to know can I easily replace libtomcrypt with OpenSSL in dropbear project? I’ve already compiled OpenSSL in my own project and don’t want to use an additional encryption library.
Thanks!

@mkj
Copy link
Owner

mkj commented Oct 19, 2023

It would be possible but I don't know of anyone who's done it.

@isinglever
Copy link
Author

It would be possible but I don't know of anyone who's done it.

Thanks for your reply. I’ve reviewed some of the project’s code and found that the parts related to encryption are tightly coupled with libtomcrypt. It seems challenging to replace it with OpenSSL.

@stokito
Copy link
Contributor

stokito commented Dec 24, 2023

I also thought about this to make a smaller firmware for OpenWrt. But here it's even better that the DB uses own crypto library and not depends on others. A user may update the OpenSSL and broke an SSH access. We can probably link statically the OpenSSL but then it will give no any disk space saving so why to do that.

Potentially maybe it would be possible to make the libtomcrypt as a general TLS provider to use in OpenWrt instead of OpenSSL, mbedTLS, WolfSSL etc.
That's probably too big task with not that great benefits.
I also found an interesting TS library BearSSL that by a description sounds similar to the libtomcrypt.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants