From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/3366
Path: news.gmane.org!not-for-mail
From: =?ISO-8859-2?Q?Daniel_Cegie=B3ka?= <daniel.cegielka@gmail.com>
Newsgroups: gmane.linux.lib.musl.general
Subject: Re: High-priority library replacements?
Date: Sun, 26 May 2013 22:09:13 +0200
Message-ID: <CAPLrYER960BeuYE31f=ES=m25O6PPpDUrXzRCTAhhaTROQbakQ@mail.gmail.com>
References: <20130425041553.GA13951@brightrain.aerifal.cx> <CAOPXC2=iHvRetaLzvdOuRKdXe5D19_-G+2N5vf-dxxYy7M6eQg@mail.gmail.com>
Reply-To: musl@lists.openwall.com
NNTP-Posting-Host: plane.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
X-Trace: ger.gmane.org 1369598984 18972 80.91.229.3 (26 May 2013 20:09:44 GMT)
X-Complaints-To: usenet@ger.gmane.org
NNTP-Posting-Date: Sun, 26 May 2013 20:09:44 +0000 (UTC)
To: musl@lists.openwall.com
Original-X-From: musl-return-3370-gllmg-musl=m.gmane.org@lists.openwall.com Sun May 26 22:09:46 2013
Return-path: <musl-return-3370-gllmg-musl=m.gmane.org@lists.openwall.com>
Envelope-to: gllmg-musl@plane.gmane.org
Original-Received: from mother.openwall.net ([195.42.179.200])
	by plane.gmane.org with smtp (Exim 4.69)
	(envelope-from <musl-return-3370-gllmg-musl=m.gmane.org@lists.openwall.com>)
	id 1UghGD-0002Th-T8
	for gllmg-musl@plane.gmane.org; Sun, 26 May 2013 22:09:45 +0200
Original-Received: (qmail 17847 invoked by uid 550); 26 May 2013 20:09:44 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
Original-Received: (qmail 17839 invoked from network); 26 May 2013 20:09:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :content-type;
        bh=JjEeaTh7nR3eWKql4/wGiJYa3e8+DxldpaWrVbol/Zw=;
        b=Rr6zGbSdNoPwlc270RpYeRaF1BY96wN8PGXuL0888RxaSQhnR0XshU0EmyKZz8Ocv2
         CuBm0XY+MqBHufUyp5iNWSaEFhh2CFx5d9TqmsABAMeEyniKzz/YsxB00iPFMa6/Xdnd
         DY1WZo92Dd+gOS+Ydtwz2qtaIzof3TTFLu0Dl5lKoOnwFhmd4nJfAIAkRT06Ea4rNr82
         vJvcvEfkzYxUnjvzTGyP68lTwcmIbOtsp0cBWaeARcQ2GDRkwyYDyxBpGW8uEGbrUhQH
         pldhRYEBBMi3yY3NYQttrZv7xL35s4SnL1/s99GAcYfwCJvUlvdV/A3q7Nd0SDrC9qPU
         yzow==
X-Received: by 10.112.154.35 with SMTP id vl3mr10102808lbb.55.1369598973129;
 Sun, 26 May 2013 13:09:33 -0700 (PDT)
In-Reply-To: <CAOPXC2=iHvRetaLzvdOuRKdXe5D19_-G+2N5vf-dxxYy7M6eQg@mail.gmail.com>
Xref: news.gmane.org gmane.linux.lib.musl.general:3366
Archived-At: <http://permalink.gmane.org/gmane.linux.lib.musl.general/3366>

2013/4/25 Gregor Pintar <grpintar@gmail.com>:
> Hello.

> I am working on cryptographic library. It's far from being finished.
> I would be very glad, if someone could look at it.
> Currently I have problems with API design so help would be welcome.
> It isn't in git yet.
> You can get it here:
> https://dl.dropboxusercontent.com/u/83450675/kripto/kripto.tar.gz
> I have plans for SSL library on top of it, but it could take years.

@Gregor Pintar
What do you think about using tropicssl on libkripto (aka libssl and
libcrypto in openssl)?

I looked at the difference between PolarSSL and tropicssl and
differences are often purely cosmetic. I think we can apply the
following changes in PolarSSL to tropicssl and thereby gain a small
SSL library under a BSD license.

http://gitorious.org/tropicssl

Does anyone have a better suggestion?

Daniel


> I think best way is not to trust any certificate authority.
> Maybe some certificate p2p protocol could be done?