mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
From: Bruno Thomsen <bth@kamstrup.dk>
To: m.olbrich@pengutronix.de
Cc: bth@kamstrup.dk, ptxdist@pengutronix.de
Subject: [ptxdist] [PATCH v2] dropbear: Added Elliptic Curve Cryptography options.
Date: Mon, 16 Jun 2014 14:02:41 +0200	[thread overview]
Message-ID: <1402920161-4345-1-git-send-email-bth@kamstrup.dk> (raw)
In-Reply-To: <Re: [PATCH 2/2] dropbear: Added Elliptic Curve Cryptography options.>

Support for ecdsa, ecdh and curve25519-donna options.

Signed-off-by: Bruno Thomsen <bth@kamstrup.dk>
---
v1..v2:
Removed redundant default n from Kconfig file.


 rules/dropbear.in   |   26 ++++++++++++++++++++++++--
 rules/dropbear.make |   24 ++++++++++++++++++++++++
 2 files changed, 48 insertions(+), 2 deletions(-)

diff --git a/rules/dropbear.in b/rules/dropbear.in
index 21301ba..fe2ada3 100644
--- a/rules/dropbear.in
+++ b/rules/dropbear.in
@@ -235,7 +235,6 @@ config DROPBEAR_SHA1_96
 config DROPBEAR_SHA256
 	bool
 	prompt "sha256"
-	default n
 	help
 	  SHA-2 is a set of cryptographic hash functions (SHA-224, SHA-256,
 	  SHA-384, SHA-512) designed by the National Security Agency (NSA)
@@ -248,7 +247,6 @@ config DROPBEAR_SHA256
 config DROPBEAR_SHA512
 	bool
 	prompt "sha512"
-	default n
 	help
 	  SHA-2 is a set of cryptographic hash functions (SHA-224, SHA-256,
 	  SHA-384, SHA-512) designed by the National Security Agency (NSA)
@@ -288,6 +286,30 @@ config DROPBEAR_DSS
 	  key size). In contrast, RSA signature length is a function
 	  of the key length employed.
 
+config DROPBEAR_ECDSA
+	bool
+	prompt "ecdsa"
+	help
+	  ECDSA stands for Elliptic Curve Digital Signature Algorithm.
+	  ECDSA is significantly faster than RSA or DSS.
+
+config DROPBEAR_ECDH
+	bool
+	prompt "ecdh"
+	help
+	  ECDH stands for Elliptic Curve Diffie-Hellman.
+
+config DROPBEAR_CURVE25519
+	bool
+	depends on DROPBEAR_ECDSA || DROPBEAR_ECDH
+	prompt "curve25519-donna"
+	help
+	  Enable curve25519-donna for key exchange.
+	  This is another elliptic curve method with good security properties.
+	  This algorithm does not rely on NIST-based curves
+	  and gives us more security confidence against a possible
+	  backdoor in nistp-256 curve.
+
 comment "Authentication types, at least one required --- RFC Draft requires pubkey auth"
 
 config DROPBEAR_PASSWD
diff --git a/rules/dropbear.make b/rules/dropbear.make
index 5ab6fd3..5cbd4aa 100644
--- a/rules/dropbear.make
+++ b/rules/dropbear.make
@@ -222,6 +222,30 @@ else
 	@$(call disable_c, $(DROPBEAR_DIR)/options.h,DROPBEAR_DSS)
 endif
 
+ifdef PTXCONF_DROPBEAR_ECDSA
+	@echo "ptxdist: enabling ecdsa"
+	@$(call enable_c, $(DROPBEAR_DIR)/options.h,DROPBEAR_ECDSA)
+else
+	@echo "ptxdist: disabling ecdsa"
+	@$(call disable_c, $(DROPBEAR_DIR)/options.h,DROPBEAR_ECDSA)
+endif
+
+ifdef PTXCONF_DROPBEAR_ECDH
+	@echo "ptxdist: enabling ecdh"
+	@$(call enable_c, $(DROPBEAR_DIR)/options.h,DROPBEAR_ECDH)
+else
+	@echo "ptxdist: disabling ecdh"
+	@$(call disable_c, $(DROPBEAR_DIR)/options.h,DROPBEAR_ECDH)
+endif
+
+ifdef PTXCONF_DROPBEAR_CURVE25519
+	@echo "ptxdist: enabling curve25519"
+	@$(call enable_c, $(DROPBEAR_DIR)/options.h,DROPBEAR_CURVE25519)
+else
+	@echo "ptxdist: disabling curve25519"
+	@$(call disable_c, $(DROPBEAR_DIR)/options.h,DROPBEAR_CURVE25519)
+endif
+
 ifdef PTXCONF_DROPBEAR_PASSWD
 	@echo "ptxdist: enabling passwd"
 	@$(call enable_c, $(DROPBEAR_DIR)/options.h,ENABLE_SVR_PASSWORD_AUTH)
-- 
1.7.9.5


-- 
ptxdist mailing list
ptxdist@pengutronix.de

       reply	other threads:[~2014-06-16 12:02 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <Re: [PATCH 2/2] dropbear: Added Elliptic Curve Cryptography options.>
2014-06-16 12:02 ` Bruno Thomsen [this message]
2014-06-16 19:13   ` Michael Olbrich

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1402920161-4345-1-git-send-email-bth@kamstrup.dk \
    --to=bth@kamstrup.dk \
    --cc=m.olbrich@pengutronix.de \
    --cc=ptxdist@pengutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox