Scott,

Just been reading about it.  (Was away for a few days.)

The reason it's not there now is neither Windows CAPI nor OpenSSL supported -256 or -512 when the hashing functions were first implemented.

I notice the development branch of OpenSSL now includes SHA-256/512 so I might look at compiling up 0.9.8-dev and see how it goes.

Otherwise we'll have to actually implement the algorithm. Mind you - that's not that difficult to do, it's just not likely to be as quick as the OpenSSL implementation.

Cheers,
        Berin

Scott Cantor wrote:
In light of the recent talk about SHA-1 being weakened, does the C++ xmlsec
library support the stronger SHA hashing algorithms at this point?

I see the constants defined in the Java version, but I can't use them if
they won't interop.

I suspect adding the support isn't too hard, but I don't have an ASF contrib
form on file, so it's not a simple matter for me to donate the work if I do
it, so I thought I'd ask first.

-- Scott



Reply via email to