Skip to content

crypto/tls: support RFC8998 SM3 #54087

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
xuweiguo opened this issue Jul 27, 2022 · 6 comments
Open

crypto/tls: support RFC8998 SM3 #54087

xuweiguo opened this issue Jul 27, 2022 · 6 comments
Labels
NeedsDecision Feedback is required from experts, contributors, and/or the community before a change can be made. Proposal-Crypto Proposal related to crypto packages or other security issues
Milestone
Unplanned

Comments

@xuweiguo
Copy link

can tls support RFC8998

include TLS_SM4_GCM_SM3
@mvdan mvdan changed the title can tls support RFC8998 crypto/tls: support RFC8998 Jul 27, 2022
@mvdan
Copy link
Member

mvdan commented Jul 27, 2022

cc @golang/security

@mvdan mvdan added the NeedsDecision Feedback is required from experts, contributors, and/or the community before a change can be made. label Jul 27, 2022
@neild neild added the Proposal-Crypto Proposal related to crypto packages or other security issues label Jul 27, 2022
@mengzhuo
Copy link
Contributor

FYI sm3 proposal and CL
#24898
https://go-review.googlesource.com/c/crypto/+/106615

@xuweiguo
Copy link
Author

can use it in tls.dial

@xuweiguo xuweiguo closed this as not planned Won't fix, can't repro, duplicate, stale Jul 28, 2022
@xuweiguo xuweiguo reopened this Jul 28, 2022
@mengzhuo
Copy link
Contributor

can use it in tls.dial

Not yet.
Here are some steps for RFC 8998 accpeted by Go:

  1. new package golang.org/x/crypto/sm4
  2. new package golang.org/x/crypto/sm3
  3. port them back into Go main project
  4. crypto/tls adding new cipher suites (CCM might be rejected)

@xuweiguo
Copy link
Author

use sm4/sm3 made by others to realize the above steps, but it failed
Babassl has been unable to connect

@seankhliao seankhliao changed the title crypto/tls: support RFC8998 crypto/tls: support RFC8998 SM3 Jul 29, 2022
@seankhliao seankhliao added this to the Unplanned milestone Aug 20, 2022
@julieqiu julieqiu removed this from Go Security Sep 8, 2022
@Xminry
Copy link

Xminry commented Apr 1, 2023

this may work
https://github.com/Xminry/smtls

@xuweiguo xuweiguo mentioned this issue May 4, 2023
Closed
@seankhliao seankhliao mentioned this issue Oct 31, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
NeedsDecision Feedback is required from experts, contributors, and/or the community before a change can be made. Proposal-Crypto Proposal related to crypto packages or other security issues
Projects
None yet
Milestone
Unplanned
Development

No branches or pull requests
6 participants
@neild @mengzhuo @mvdan @seankhliao @xuweiguo @Xminry