Simon Josefsson

Results 100 comments of Simon Josefsson

> This is still an issue to be able to do a release? A release would be really good! There is a bunch of things fixed already. If you could...

> I have tagged version 2.4.0. This is what you need? I will added Windows binaries in the next days. There is also an Author file, do you want to...

Ping? I still think a couple of more files in globalplatform/src/ needs to add the OpenSSL exception. I now realize another approach to solve this is to say that OpenSSL...

Thanks for feedback! Indeed choice of algorithms is a fundamental bigger question. > A more fundamental question is: why another lattice PQ KEM? We intend to add add Kyber soon....

Hi. I've pushed an update in https://github.com/openssh/openssh-portable/commit/639c1784d5234261b3645f2e2f4d556b589489c0 This adds a `mceliece6688128f.sh` script that extracts a standalone `mceliece6688128f.c` from libmceliece, which is used when the system doesn't have libmceliece. Now GitHub...

For reference, here is the patch we use to disable the `helloworld` self-test: https://salsa.debian.org/go-team/packages/in-toto-golang/-/blob/1c7eac08f9cc1659e49fc74c57f7959a11133cf0/debian/patches/0001-Disable-test-that-require-sourceless-test-data-hello.patch /Simon

Thanks for quick response! > IIRC it's only the hash but I can take another look. The binary `test/data/helloworld` is in the git repository. We are pruning that file, and...

Thanks for followup! A wrapper script like that seems like a good approach. My only goal is to package this in Debian so that it gets built using the Debian...

Thanks for update! Big of you to reconsider. To be honest, I'm somewhere between your extreme positions. I do believe PLAIN is not ideal and that we can do better,...

Closing the circle here, I blogged about SCRAM concerns here: https://blog.josefsson.org/2021/06/08/whats-wrong-with-scram/