3 ms·
The criticisms that I have heard regarding ring/rustls is that the crypto primitives are implemented in assembly and there is no portable reference implementati
by CameronNemo 4y ago
The criticisms that I have heard regarding ring/rustls is that the crypto primitives are implemented in assembly and there is no portable reference implementations that can be used to verify them.
In contrast, EverCrypt is a formally proven TLS implementation. There is a portable implementation of all algorithms that is used to verify the correctness of the assembly implementations.
https://project-everest.github.io/ https://project-everest.github.io/
- dochtman 4y agoWork is ongoing to use FiatCrypto-based implementations for the primitives, which is discussed a bit here: https://www.crowdsupply.com/sutajio-kosagi/precursor/updates/bringing-up-tls-on-precursor https://www.crowdsupply.com/sutajio-kosagi/precursor/updates...
- CameronNemo 4y agoThat is great to see and a welcome change. Also interesting to see the Precursor project getting so deep in the weeds! I saw that project on crowd supply months ago and thought it was notable.