From: Niels Möller This is an attempt at defining a development target for
Nettle-2.8, inspired by similar pages for recent GMP releases. [Last
- updated 2014-01-02] Nettle release plans
This really ought to be done before release
@@ -55,18 +55,28 @@ Do separate aes128_ctx, etc, with smaller allocation for subkeys.- Consider doing the same separation for camellia (and possibly - cast128), which also use fewer subkeys for shorter key sizes. + Do the same separation for camellia, which also + use fewer subkeys for shorter key + sizes. (And possibly also for + cast128).
Don't require initialization of *dst_length for base*_decode_update.
- Rename gcm "iv" to "nonce". Keep old names for backwards - compatibility. + New DSA interface, with a separate struct dsa_params.
- New DSA interface, with a separate struct dsa_params. + Drop key size argument from nettle_set_key_func. +
++ Use the nettle_cipher abstraction only for block ciphers (in + particular, exclude arcfour). Use a const for the ctx argument to + nettle_crypt_func. +
++ Consider making a public interface similar to nettle_aead? With + the above change, it can't use nettle_crypt_func.
+
Add poly1305.
-+
Add chacha.
@@ -103,6 +113,9 @@
Document poly1305.
++ Document chacha. +
@@ -153,15 +166,6 @@ buffering. E.g., when using them for HMAC keyed "inner" and "outer" states, we now get three buffers but we only need one.
-- Use the nettle_cipher abstraction only for block ciphers (in - particular, exclude arcfour). Use a const for the ctx argument to - nettle_crypt_func. -
-- Consider making a public interface similar to nettle_aead? With - the above change, it can't use nettle_crypt_func. -
Make it possible to build nettle and hogweed using mini-gmp.