Berin, SHA-256, 384 & 512 are supported in Win2003 Server CryptoAPI. We should support it in XSEC also. :)
Best regards, Milan > -----Original Message----- > From: Berin Lautenbach [mailto:[EMAIL PROTECTED] > Sent: Friday, February 18, 2005 10:08 AM > To: security-dev@xml.apache.org > Subject: Re: C++ lib support for SHA-256, etc.? > > > Scott Cantor wrote: > > >>A thread on the W3C Dsig mailing list has begun to address the > >>question of alternate algorithms (see > >>http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2005JanMa > >>r/0030.html), but has not gotten very far (yet). Maybe you should > >>chime in. > > > > > > Thanks for the pointer. > > I've been watching this since it started, and it hasn't really gone > anywhere. So I've just given it a kick as I share the same concerns. > > BTW - I have compiled up OpenSSL 0.9.8-dev and managed to get > it to link > against the library (some minor changes to structure definitions that > required some minor changes in the library). All the tests > run fine, so > I'm going to try to add 256/512 support over the weekend. > > If I'm feeling adventurous I might play with RIPEMD as well. > > I realise it's against the dev version of OpenSSL, but it's > the best I > can do without actually implementing the algs directly. > (Which I can do > if there is enough interest?) > > Cheers, > Berin >