questions on using ed25519

[Nicola Tuveri]

The change in itself is quite trivial, just editing the dgst manpage to
remove the reference to pkeyutl.

The issue has more instructions and the idea was to use it as a way to let
a new developer familiarize with OpenSSL contributing guidelines and
process.

Another user already started working on it, though!

If anyone is interested we have more "good first issue" items on github
that we considered a good starting point for users from the community that
are willing to start contributing to the project by coding or working on
the documentation.


Nicola

On Sun, Apr 26, 2020, 04:01 yang berlin <yangbolinzju at gmail.com> wrote:

> Sure, I can help.
> It's my pleasure to help with the project.
> Since you have opened an issue. Then what should I do?
>
>
> Nicola Tuveri <nic.tuv at gmail.com> 于2020年4月24日周五 下午11:17写道：
>
>> That's right! Thanks Viktor for pointing that out!!
>>
>> I just opened an issue to track this:
>> https://github.com/openssl/openssl/issues/11633
>>
>> We warmly welcome contributions from everyone and this could be a good
>> first issue to work on: Yang (as the person that started this thread and
>> noticed the issue first) or anyone else from the community, are you willing
>> to get your hands dirty and help out the project?
>>
>>
>>   Nicola
>>
>>
>> On Thu, 23 Apr 2020 at 19:33, Viktor Dukhovni <openssl-users at dukhovni.org>
>> wrote:
>>
>>> On Thu, Apr 23, 2020 at 11:23:35AM +0200, Nicola Tuveri wrote:
>>>
>>> > > On 22/04/2020 18:12, Viktor Dukhovni wrote:
>>> > > > sadly the
>>> > > > EVP_PKEY_METHOD for ed25519 has a NULL sign() member, instead,
>>> somewhat
>>> > > > ironically, it has a digestsign() method.  This is presumably to
>>> > > > distinguish between the pure and prehash variants.  Therefore,
>>> presently
>>> > > > pkeyutl(1) indeed appears to not implement signing and verifying
>>> with
>>> > > > ed25519, this looks doable with modest effort.
>>> > >
>>> > > I'm fairly sure it used to have a "sign" function during the dev
>>> phase -
>>> > > but it was taken out. I forget the reasoning.
>>> >
>>> > Yes, that change was intentional, the reasoning is detailed in the
>>> > discussion in: https://github.com/openssl/openssl/pull/6284
>>>
>>> This did leave us with a documentation bug, the dgst(1) manpage suggests
>>> using pkeyutl(1) for ed25519 and ed448, but the latter does not work.
>>>
>>> The dgst(1) manpage probably needs a tweak to remove the misleading
>>> redirect.  Or else backport the pkeyutl(1) support from 3.0, but we're
>>> not supposed to add features in 1.1.1x patch releases, and there are no
>>> plans for a 1.1.2.
>>>
>>> --
>>>     Viktor.
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20200426/0072fc2d/attachment.html>