Re: [RFC] use libnettle for crypto

2014-03-11 Thread Tsantilas Christos
On 03/10/2014 11:50 PM, Amos Jeffries wrote: I've been searching for some time for a crypto library that provides algorithms like base64, MD4, MD5, SHA* etc that are used by Squid. So we can remove the bundled re-implementations and avoid some big issues like FIPS compliance of Squid.

Re: [RFC] use libnettle for crypto

2014-03-11 Thread Henrik Nordström
tis 2014-03-11 klockan 09:53 +0200 skrev Tsantilas Christos: No objection, just to note that these algorithms are implemented in openssl library too and squid already has dependencies to openSSL. And in Squid-2 used OpenSSL MD5 if linked to OpenSSL, or some system MD5 implementation (i.e.

Re: [RFC] use libnettle for crypto

2014-03-11 Thread Eliezer Croitoru
What about choosing between openssl and nettle? If it is veing used by GnuTLS it should be good for us too. I have not seen this lib before in my short life. If it's only MD5 and basic others I assume that it should be static lib enough to allow us depend on it without fearing from someone

Re: [RFC] use libnettle for crypto

2014-03-11 Thread Amos Jeffries
On 2014-03-12 06:40, Eliezer Croitoru wrote: What about choosing between openssl and nettle? Given a choice between those two nettle wins hand-down on API stability and licensing grounds. OpenSSL has licensing policy issues on Debian and derived systems, and MacOS. RHEL and derived

Re: [RFC] use libnettle for crypto

2014-03-11 Thread Eliezer Croitoru
On 11/03/2014 23:15, Amos Jeffries wrote: On 2014-03-12 06:40, Eliezer Croitoru wrote: What about choosing between openssl and nettle? Given a choice between those two nettle wins hand-down on API stability and licensing grounds. OpenSSL has licensing policy issues on Debian and derived

[RFC] use libnettle for crypto

2014-03-10 Thread Amos Jeffries
I've been searching for some time for a crypto library that provides algorithms like base64, MD4, MD5, SHA* etc that are used by Squid. So we can remove the bundled re-implementations and avoid some big issues like FIPS compliance of Squid. Nettle appears to have become widely available in

Re: [RFC] use libnettle for crypto

2014-03-10 Thread Francesco
Before I forge on ahead, does anyone have objections to adding it as a build dependency of squid-3.5 and dropping our locally bundled crypto code which overlaps? Ok from me. Kinkie

Re: [RFC] use libnettle for crypto

2014-03-10 Thread Alex Rousskov
On 03/10/2014 03:50 PM, Amos Jeffries wrote: I've been searching for some time for a crypto library that provides algorithms like base64, MD4, MD5, SHA* etc that are used by Squid. So we can remove the bundled re-implementations and avoid some big issues like FIPS compliance of Squid.

Re: [RFC] use libnettle for crypto

2014-03-10 Thread Amos Jeffries
On 2014-03-11 13:23, Alex Rousskov wrote: On 03/10/2014 03:50 PM, Amos Jeffries wrote: I've been searching for some time for a crypto library that provides algorithms like base64, MD4, MD5, SHA* etc that are used by Squid. So we can remove the bundled re-implementations and avoid some big