Actions
Task #5241
open
Redesign support for HMAC keys
Status:
New
Priority:
Normal
Assignee:
-
Category:
Security
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Description
Our current approach was broken by OpenSSL 3.0, and a simple fix or workaround looks infeasible. A substantial redesign is needed.
One potential idea is to move the HMAC functionality out of transform::PrivateKey and into a new class SecretKey or SymmetricKey. This would completely separate symmetric keys (handled by the new class) from asymmetric keys (handled by PrivateKey), which probably makes sense given the fundamentally different nature of the two kinds of keys.
Updated by Davide Pesavento about 2 years ago
- Related to Feature #5154: OpenSSL 3.0 support added
Updated by Davide Pesavento almost 2 years ago
- Related to Bug #5251: EVP_PKEY_base_id returns 0 added
Updated by Davide Pesavento about 1 year ago
- Tags changed from security to security, openssl
Actions