News for hackers. Stuff that matters.

A comment on Alpine Edge has switched to libressl. Parent comment

Re:Alpine Edge has switched to libressl by zeveb on Wednesday October 12, 2016 @12:28PM (#12694281)
Was the issue that the OpenSSL SRP stuff was wonky, or that the LibreSSL guys hate SRP? I hope that it's the latter, because SRP is a really good protocol.

As an aside, does anyone know if there's been progress with elliptic curve SRP? The last literature review I did was … shaky.

[ Parent | on HN ]
Re:Alpine Edge has switched to libressl by Rafert on Wednesday October 12, 2016 @05:46PM (#12696661)
They looked for maintainers[0] and later removed it when the OpenSSL SRP code was considered bad and turned out to be vulnerable as well[1]

[0]: http://undeadly.org/cgi?action=article&sid=20140429062932 [1]: http://www.openbsd.org/papers/eurobsdcon2014-libressl.html

[ Parent | on HN ]