Skip to content

Latest commit

 

History

History
61 lines (44 loc) · 1.43 KB

README.prov.md

File metadata and controls

61 lines (44 loc) · 1.43 KB

GOST provider

The GOST provider is currently built in parallell with the GOST engine, and is implemented like a wrapper around the engine code.

Currently implemented

Symmetric ciphers:

  • gost89
  • gost89-cnt
  • gost89-cnt-12
  • gost89-cbc
  • kuznyechik-ecb
  • kuznyechik-cbc
  • kuznyechik-cfb
  • kuznyechik-ofb
  • kuznyechik-ctr
  • magma-cbc
  • magma-ctr
  • magma-ctr-acpkm
  • magma-ctr-acpkm-omac
  • kuznyechik-ctr-acpkm
  • kuznyechik-ctr-acpkm-omac

Hashes:

  • id-tc26-gost3411-12-256 (md_gost12_256)
  • id-tc26-gost3411-12-512 (md_gost12_512)
  • id-GostR3411-94 (md_gost94)

MACs:

  • gost-mac
  • gost-mac-12
  • magma-mac
  • kuznyechik-mac
  • kuznyechik-ctr-acpkm-omac

TODO, not requiring additional OpenSSL support

  • Basic support for GOST keys, i.e. implementations of KEYMGMT (including key generation), DECODER and DECODER.

  • Support for these operations using GOST keys:

    • ASYM_CIPHER (encryption and decryption using GOST keys)
    • SIGNATURE (signing and verifying using GOST keys)

TODO, which requires additional OpenSSL support

  • TLSTREE support. This may require additional changes in libssl. Needs investigation.

  • PKCS7 and CMS support. This requires OpenSSL PKCS7 and CMS code to change for better interfacing with providers.

TODO, far future

  • Refactor the code into being just a provider. This is to be done when engines aren't supported any more.