[RFC][PATCH][BZ 2100] blowfish support in libcrypt
Florian Weimer
fweimer@redhat.com
Thu Jun 1 20:28:00 GMT 2017
On 06/01/2017 10:16 PM, Joseph Myers wrote:
> Using OpenSSL in a crypt implementation does of course bring in the same
> namespace issues as with NSS modules linked with external libraries.
That's why I want to build the replacement *from* (or as part of) a
cryptographic library, not using it. This way, the internal mechanics
can be hidden easily, and we still can use tried-and-test (and
optimized) implementations of the cryptographic primitives.
We may have a technical namespace violation with
pthread_mutex_lock/pthread_mutex_unlock if there is a PRNG for salt
generation, but I don't think that's particularly worrisome.
Thanks,
Florian
More information about the Libc-alpha
mailing list