tlsfuzzer/tlslite-ng

Add pyca/cryptography backend

Open

#303 opened on Aug 1, 2018

View on GitHub
 (4 comments) (0 reactions) (0 assignees)Python (95 forks)auto 404
complexenhancementhelp wanted

Repository metrics

Stars
 (269 stars)
PR merge metrics
 (PR metrics pending)

Description

https://github.com/pyca/cryptography provides a lot of algorithms we use. Implement backends to those algorithms:

  • RC4
  • 3DES-CBC
  • AES-CBC
  • AES-GCM
  • AES-CCM
  • ChaCha20-Poly1305
  • RSA
  • DH (? – using gmpy2 should give faster code than pyca/cryptography but side-channel vulnerable)
  • ECDHE (see also #367)
  • ECDSA (see also #367)
  • EdDSA (?) (likely depends on EdDSA being implemented first, see #231)

in general, it would be nice to first implement #309, so that we can see if and when the backends are used (and if use of them is not counter-productive – while using code that is side-channel secure but is, say, 2 times slower than the alternative side-channel insecure code is most-likely ok, using secure code that is 10 times slower, is not a good trade

checking if it works with version of pyca/cryptography present in CentOS/EPEL would also be nice in travis

Contributor guide

Research direction
Study the existing backend architecture in tlslite ng and its integration with pyca/cryptography. Choose one algorithm from the list (e.g., AES CBC) and implement it as a backend, ensuring side channel resistance and compatibility with CentOS/EPEL versions. Test the implementation with the existing test suite.
Tech stack
python
Domain
securitybackend
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Over 1 week
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
PythonCryptography
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
30