Package: libmbedcrypto16 X-Debbugs-Cc: [email protected] Version: 3.6.5-0.1~deb13u1 Severity: wishlist
Dear Maintainer, In the 3.6.5.orig download the following configs appear to have changed from the long description. Blowfish, ARC4, XTEA, TLS1.0 and 1.1 no longer appear in the config. A suggested long description as 3.6.5 is configured, follows: **** mbed TLS (formerly known as PolarSSL) is a lean open source crypto library for providing SSL and TLS support in your programs. It offers an intuitive API and documented header files, so you can actually understand what the code does. It features: - Symmetric algorithms: AES, Camellia, ARIA, ChaCha20-Poly1305, DES/3DES - Hash algorithms: MD5, SHA-1, SHA-2(224/256/384/512), SHA-3, RIPEMD-160 - Entropy pool, and random generators: CTR-DRBG, HMAC-DRBG - Public key algorithms: PSK, DHE, ECDHE, RSA, ECDH - Short Weierstrass curves (supporting ECP, ECDH, ECDSA): SECP192R1, SECP224R1, SECP256R1, SECP384R1, SECP521R1, SECP192K1, SECP224K1, SECP256K1, BP256R1, BP384R1, BP512R1 - Montgomery curves (supporting ECP): CURVE25519, CURVE448 - TLS 1.2 and 1.3. DTLS 1.2. - Abstraction layers for ciphers, hashes, public key operations, platform abstraction and threading This package contains the shared library handling cryptography. *** I believe this level of detail is important, as the package implements its own TLS rather than abstracting from the system's openssl or gnutls, and may enable a feature (like DES) that has been disabled elsewhere. It is worth noting I am not developing against this library, and my suggested changes are from me reading the published config file. I would strongly urge review by someone who is more familiar with this project. -- System Information: Debian Release: 13.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.12.63+deb13-amd64 (SMP w/24 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: SELinux: enabled - Mode: Enforcing - Policy name: default Versions of packages libmbedcrypto16 depends on: ii libc6 2.41-12+deb13u1 libmbedcrypto16 recommends no packages. libmbedcrypto16 suggests no packages. -- debconf-show failed
