Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CAPLrYERGRRDa0bXf06EROFefQpXPYHaa429j-o2LU8S2aRrRtQ@mail.gmail.com>
Date: Thu, 15 Jan 2015 22:17:48 +0100
From: Daniel Cegiełka <daniel.cegielka@...il.com>
To: musl@...ts.openwall.com
Subject: Re: crypto visibility

2015-01-14 23:22 GMT+01:00 Rich Felker <dalias@...c.org>:
> On Wed, Jan 14, 2015 at 09:51:37AM +0100, Daniel Cegiełka wrote:
>> Hi,
>> Can we make these functions visible? They are very useful.
>>

>
> In short, no, at least not without a lot of other things happening. To
> do so would be to recreating one of the big things musl was designed
> to get away from: random nonstandard interfaces with no documented
> interface contract and behavior determined by whatever the existing
> implementation(s) happened to do. Note that making these interfaces
> public would also involve making the size and possibly representation
> of the state structure a public API/ABI too.

ok, I understand the reasons. Func's crypto API is totally different
per implementation and it is terrible, eg three times is added
SHA512's code to OpenSSH: crypt(), libc SHA512 and.. from
libressl/openssl.

btw. I have had some success in porting ssh code from OpenBSD CVS repo
to musl... but _without_ openssl :)

# file scp/scp sftp/sftp sftp-server/sftp-server ssh/ssh ssh-agent/ssh-agent s>
scp/scp:                 ELF 64-bit LSB executable, x86-64, version 1,
statically linked, stripped
sftp/sftp:               ELF 64-bit LSB executable, x86-64, version 1,
statically linked, stripped
sftp-server/sftp-server: ELF 64-bit LSB executable, x86-64, version 1,
statically linked, stripped
ssh/ssh:                 ELF 64-bit LSB executable, x86-64, version 1,
statically linked, stripped
ssh-agent/ssh-agent:     ELF 64-bit LSB executable, x86-64, version 1,
statically linked, stripped
ssh-keyscan/ssh-keyscan: ELF 64-bit LSB executable, x86-64, version 1,
statically linked, stripped

# ls -lh scp/scp sftp/sftp sftp-server/sftp-server ssh/ssh ssh-agent/ssh-agent>
-rwxr-xr-x    1 root     root        89.8k Jan 14 19:07 scp/scp
-rwxr-xr-x    1 root     root       131.2k Jan 14 19:07 sftp-server/sftp-server
-rwxr-xr-x    1 root     root       146.7k Jan 14 19:07 sftp/sftp
-rwxr-xr-x    1 root     root       336.9k Jan 14 19:07 ssh-agent/ssh-agent
-rwxr-xr-x    1 root     root       482.1k Jan 14 19:07 ssh-keyscan/ssh-keyscan
-rwxr-xr-x    1 root     root       616.8k Jan 14 19:07 ssh/ssh

tiring work... I think it is better to write ssh client for tinyssh
from scratch.

Daniel

> Rich

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.