randombit/botan

Integrate ROCA vulnerability check

Open

#1,272 opened on Oct 21, 2017

View on GitHub
 (2 comments) (0 reactions) (0 assignees)C++ (654 forks)auto 404
enhancementgood first issuehelp wanted

Repository metrics

Stars
 (3,283 stars)
PR merge metrics
 (PR metrics pending)

Description

Would it make sense to integrate the ROCA vulnerability check into the RSA public key check_key() method?

https://github.com/crocs-muni/roca

Contributor guide

Research direction
Study the ROCA vulnerability check implementation from the referenced repo, then integrate it into Botan's RSA public key check key() method. Ensure it runs during key validation.
Tech stack
cpp
Domain
security
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
C++Gitcryptography basics
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40