Get rid of OpenSSL about crypto-tk HOT 5 CLOSED

Hello @rbost -

Is it possible to use hardware accelerated modules in mbedTls for higher performance?
Please see a list of hash, symmetric and asymmetric primitives already accelerated:
http://bit.ly/2i8GukJ

Will that speed up Sophos' rsa tdp private key operations?

from crypto-tk.

Yes. But, we will use mbedTLS only for RSA (which cannot be hardware accelerated), not for the rest of the primitives (it will be libsodium).

As the TDP will not be used in practice for the most efficient SSE schemes, so I do not see this as a real limitation. Do you actually need it?

from crypto-tk.

It'd be interesting to benchmark sophos' performance with an accelerated RSA TDP. Sophos' beauty lies in it's simplicity - as a self taught SSE novice I was able to comprehend the theory behid it compared to most other constructions, even Diana. I suppose from a practical viewpoint, I'll have to work through the CRPRF innards to really understand Diana.

Thanks for all of your work BTW - the papers, presentations, videos and code all add up to a really valuable online course in cutting edge SSE

from crypto-tk.

OK, I will probably leave both implementations. mdedTLS will be used by default, and the OpenSSL implementation will still be available.

You should really look at Diana, it is not very complicated in the end 😃.

from crypto-tk.

OpenSSL is no longer necessary to build the OpenSSE cryptography toolkit since commit 74942b9.
OpenSSL is still used in an implementation of the trapdoor permutation, but, by default, an embedded mbedTLS-based implementation is used.

from crypto-tk.