diff options
| author | Steve Marquess <marquess@openssl.com> | 2017-08-21 15:57:25 -0400 |
|---|---|---|
| committer | Steve Marquess <marquess@openssl.com> | 2017-08-21 16:13:35 -0400 |
| commit | fe36a698477e7cb1a49de3f4cba5ad7f89f5ad4c (patch) | |
| tree | da98e7e3b4e37b6a7d7bfba66f61d77473d3b6ca | |
| parent | d674242a884368083bf1044cc4e6e30d8f452a50 (diff) | |
Add "wishlist" of desired but possibly unobtainable fixes/improvements
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Stephen Henson <steve@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4208)
| -rw-r--r-- | README.wishlist | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/README.wishlist b/README.wishlist new file mode 100644 index 0000000000..111ee3ce75 --- /dev/null +++ b/README.wishlist @@ -0,0 +1,31 @@ +A "wish list" of changes we'd like to make to the FIPS module if we could. +Note the CMVP requires retesting of all previously tested platforms +("Operational Environments") to implement any changes considered "cryptographically +significant". Since the OpenSSL FIPS module v2.0 has some 250 such formally +tested platforms (and counting), retesting just isn't logistically or economically +feasible. + +-------- +https://github.com/openssl/openssl/pull/4157 +From 2017-08-14, Fix GCM MAC computation for AES-GCM by srahul123 +cryptographically significant, not fixable + +-------- +Andy Polyakov: harmonize with __thumb__ clause in FIPS_ref_point() (#3354), +https://patch-diff.githubusercontent.com/raw/openssl/openssl/pull/3354.patch +https://github.com/openssl/openssl/pull/3354#pullrequestreview-36086406 +May be possible to introduce in future change letter + +-------- +CVE-2016-0701 +cryptographically significant, not fixable + +-------- +CVE-2014-0076 +cryptographically significant, not fixable + +-------- +"Lucky 13", CVE-2013-0169 +cryptographically significant, not fixable + +-------- |