Re: Crypto overhaul

2017-10-29 Thread Benjamin Kaduk
On Sat, Oct 28, 2017 at 08:36:01PM -0400, Eric McCorkle wrote: > On 10/28/2017 09:15, Poul-Henning Kamp wrote: > > > > In message <20171028123132.gf96...@kduck.kaduk.org>, Benjamin Kaduk writes: > > > >> I would say that the 1.1.x series is less bad, especially on the last > >> count, >

Re: Crypto overhaul

2017-10-29 Thread Ben Laurie
On 29 October 2017 at 15:17, Eric McCorkle wrote: > On 10/29/2017 09:46, bf wrote: >> On 10/29/17, Poul-Henning Kamp wrote: >>> >>> In message , Eric >>> McCorkl >>> e writes: On 10/28/2017 09:15, Poul-Henning Kamp wrote: > > In message <20171028123132.gf96...@kduck

Re: Crypto overhaul

2017-10-29 Thread Simon J. Gerraty
Eric McCorkle wrote: > Overall, I think LibreSSL is the best option, though there needs to be > some investigation into how easily it can be used for kernel and > boot-loader purposes. Things like libsodium are too narrow in their > focus, and BearSSL is too new. Our userland veriexec binary use

Re: Crypto overhaul

2017-10-29 Thread Eric McCorkle
On 10/29/2017 09:46, bf wrote: > On 10/29/17, Poul-Henning Kamp wrote: >> >> In message , Eric >> McCorkl >> e writes: >>> On 10/28/2017 09:15, Poul-Henning Kamp wrote: In message <20171028123132.gf96...@kduck.kaduk.org>, Benjamin Kaduk writes: > I would s

Re: Crypto overhaul

2017-10-29 Thread bf
On 10/29/17, Poul-Henning Kamp wrote: > > In message , Eric > McCorkl > e writes: >>On 10/28/2017 09:15, Poul-Henning Kamp wrote: >>> >>> In message <20171028123132.gf96...@kduck.kaduk.org>, Benjamin Kaduk >>> writes: >>> I would say that the 1.1.x series is less bad, especi

Re: Crypto overhaul

2017-10-29 Thread Poul-Henning Kamp
In message , Eric McCorkl e writes: >On 10/28/2017 09:15, Poul-Henning Kamp wrote: >> >> In message <20171028123132.gf96...@kduck.kaduk.org>, Benjamin Kaduk writes: >> >>> I would say that the 1.1.x series is less bad, especially on the last count, >>> but don't know how much you