| Summary: | Add compile time option to disable Curve25519 | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Portable OpenSSH | Reporter: | Tomas Kuthan <tomas.kuthan> | ||||
| Component: | Build system | Assignee: | Assigned to nobody <unassigned-bugs> | ||||
| Status: | CLOSED WONTFIX | ||||||
| Severity: | enhancement | CC: | djm, dtucker, tomas.kuthan | ||||
| Priority: | P5 | ||||||
| Version: | 6.8p1 | ||||||
| Hardware: | SPARC | ||||||
| OS: | Solaris | ||||||
| Attachments: |
|
||||||
|
Description
Tomas Kuthan
2015-04-09 19:34:37 AEST
Err, why? If you don't want to use it you can turn it off in the config. Created attachment 2579 [details]
Implements -DWITHOUT_ED25519
The patch makes it possible to build OpenSSH without Curve25519 by specifying -DWITHOUT_EC25519.
The patch doesn't modify regression tests nor man pages.
(In reply to Darren Tucker from comment #1) > Err, why? If you don't want to use it you can turn it off in the > config. For legal reasons we are not allowed to ship OpenSSH with any elliptic curve cryptography. We won't be adding this. We have too many #ifdefs at the moment, and as far as we are aware there are no patent encumbrances on ed25519. Fair enough. Thank you for the information. Close all resolved bugs after 7.3p1 release |