Re:Alpine Edge has switched to libressl
by gtt on Wednesday October 12, 2016 @08:26AM
(#12692179)
The only thing I miss in libreSSL is SRP. How would hn crowd recommend to pick alternative to SRP?
[ Parent
| on HN ]
Was the issue that the OpenSSL SRP stuff was wonky, or that the LibreSSL guys hate SRP? I hope that it's the latter, because SRP is a really good protocol.
As an aside, does anyone know if there's been progress with elliptic curve SRP? The last literature review I did was … shaky.
Re:Alpine Edge has switched to libressl
by Rafert on Wednesday October 12, 2016 @05:46PM
(#12696661)
They looked for maintainers[0] and later removed it when the OpenSSL SRP code was considered bad and turned out to be vulnerable as well[1]
[0]: http://undeadly.org/cgi?action=article&sid=20140429062932 [1]: http://www.openbsd.org/papers/eurobsdcon2014-libressl.html