More crypto extentsions like TLS wrapper for Client/Server connections, SSH implementation, SHA3?

[bstnbuck]

Currently, the crypto module only has the basic implementations of the crypto protocols. Current ones like SHA3 as hash algorithm or eliptic curves are not available. The current openssl module "x.openssl" can currently only accept TLS connections, but cannot provide any as a server. How about an implementation like in Go (crypto/tls) or Python (ssl, but then not the same syntax). This is essential for running web servers or sockets in general. Also, instead of the FTP module, the alternative SSH (which is much more secure) would be interesting. Are extensions like in Go planned?
https://github.com/golang/crypto

[medvednikov]

Yes, all of this is planned. Contributions welcome! :)

[bstnbuck]

I will look what I can do.

[watzon]

Was going to open my own issue, but I'll just piggy back on top of this one. Thoughts on adding additional AES algorithms such as IGE? IGE is needed for Telegram's MTProto protocol, so it could be a nice addition if someone wanted to make a MTProto client library.

I've already written an implementation in Crystal, so I could probably do the same here.

[watzon]

I've now written a working IGE implementation. I'd be happy to get it merged. What would be really useful now though is TLS support. It would probably be possible to mostly port Go's implementation.

[bstnbuck]

Hi!
Excellent, I am very much looking forward to it.
TLS with its associated algorithms (RSA, Elliptic Curves, Diffie-Hellman) need to be maintained permanently. Since there is still a lot of work to do around the core of V, I am currently working on a wrapper for all these protocols using OpenSSL and the WinAPI. OpenSSL and also the WinAPI are well maintained and vulnerabilities are few.

Implementing the Go functions I don't think is a good idea yet. The reason is that vulnerabilities are patched with nearly every release and we would also have to fit them every time.
SHA3 for example could be ported from Go I think.

TLS is planned for July - August. SSH is scheduled for after that (also as a wrapper, maybe with libssh).

[medvednikov]

Make sure to check out thirdparty/vschannel/vschannel.c and vlib/net/openssl/ssl_connection.v for reference.

[bstnbuck]

I already noticed that, thanks! vschannel.c seems to be a customized version of schannel.c from MS. Possibly this will not be necessary later (can't say yet). openssl/* I would rather move to the crypto module section.

[bstnbuck]

Unfortunately, I do not have the time to do and maintain a TLS implementation (as a wrapper for Mbed-TLS). If someone is able to find the necessary time for this, he/she is welcome to take over the project. I would be happy to look at the results and also review the code.

[blackshirt]

i have play a bit with TLS 1.3 only .. just look at TLS1.3 .. not completed yet