From: Niels Möller Date: Mon, 30 Apr 2012 07:05:00 +0000 (+0200) Subject: Updated release plan. X-Git-Tag: nettle_2.5_release_20120707~29 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fa4331ac60bc7b7c28ed37626c844ed829b29ada;p=thirdparty%2Fnettle.git Updated release plan. --- diff --git a/misc/plan.html b/misc/plan.html index 67be6c98..1b116c43 100644 --- a/misc/plan.html +++ b/misc/plan.html @@ -8,14 +8,13 @@ type="text/css" href="todo.css" media="all"/> -TODO for coming nettle-2.2 releases +TODO for coming releases -

Release plans

+

Nettle release plans

This is an attempt at defining a development target for - Nettle-2.5, inspired by similar pages for recent GMP releases. - [Last updated 2012-04-29]

-

Color codes

+ Nettle-2.5, inspired by similar pages for recent GMP releases. [Last + updated 2012-04-30]

This really ought to be done before release

@@ -32,7 +31,8 @@

Plan for the Nettle-2.5 release

RSA blinding

- Add tentative interface, as suggested by Nikos. + Add tentative interface, as suggested by Nikos. Don't try yet to + get blinding variants of all signature functions.

Documentation

@@ -45,6 +45,10 @@

Various w64 fixes, mostly by Martin Storsjö.

+

+ Workaround for uint8_fast_t gnutls/gnulib incompatibilty on SunOS 5.8. +

+

Testing

Since xenofarm isn't up and running, do some manual testing:

@@ -69,23 +73,23 @@

For Merkle-Damgaard hash functions, separate the state and the - buffering. E.g., when using then for HMAC keyed "inner" and - "outer" states. + buffering. E.g., when using them for HMAC keyed "inner" and + "outer" states, we now get three buffers but we only need one.

Use the nettle_cipher abstraction only for block ciphers (in particular, exclude arcfour). Use a const for the ctx argument to nettle_crypt_func.

-

+

Consider making a public interface similar to nettle_aead? With the above change, it can't use nettle_crypt_func.

Reorganize private key operations. Need to support RSA with and - without blinding, and DSA occording to spec and some deterministic - variant (putty), and possibly also smartcard versions where the - private key is not available to the library. And without an + without blinding, and DSA according to spec and some deterministic + variant (like putty), and possibly also smartcard versions where + the private key is not available to the library. And without an explosion of the number of functions.