Scott Cantor wrote:
A thread on the W3C Dsig mailing list has begun to address the question of alternate algorithms (see http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2005JanMa r/0030.html), but has not gotten very far (yet). Maybe you should chime in.
Thanks for the pointer.
I've been watching this since it started, and it hasn't really gone anywhere. So I've just given it a kick as I share the same concerns.
BTW - I have compiled up OpenSSL 0.9.8-dev and managed to get it to link against the library (some minor changes to structure definitions that required some minor changes in the library). All the tests run fine, so I'm going to try to add 256/512 support over the weekend.
If I'm feeling adventurous I might play with RIPEMD as well.
I realise it's against the dev version of OpenSSL, but it's the best I can do without actually implementing the algs directly. (Which I can do if there is enough interest?)
Cheers,
Berin
