Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

proposal: crypto/ecdh: support for P224 #59783

Open
koh-osug opened this issue Apr 22, 2023 · 2 comments
Open

proposal: crypto/ecdh: support for P224 #59783

koh-osug opened this issue Apr 22, 2023 · 2 comments
Labels
Proposal Proposal-Crypto Proposal related to crypto packages or other security issues
Milestone

Comments

@koh-osug
Copy link

The new added package is missing support for P-224 curves. This gives a 112 bit security and is still good enough comparable to RSA 2048 bit keys used in the field. The P-224 curve plays a role for resource constrained devices like smart cards.

@gopherbot gopherbot added this to the Proposal milestone Apr 22, 2023
@seankhliao seankhliao changed the title proposal: affected/package: crypto/ecdh proposal: crypto/ecdh: support for P224 Apr 22, 2023
@seankhliao seankhliao added the Proposal-Crypto Proposal related to crypto packages or other security issues label Apr 23, 2023
@seankhliao
Copy link
Member

cc @golang/security

@robinwesterik
Copy link

I'm still working with the "deprecated" crypto/elliptic and crypto/curve packages because of this. As Karsten mentioned, a lot of embedded devices rely on P-224 curves for security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Proposal Proposal-Crypto Proposal related to crypto packages or other security issues
Projects
Status: Incoming
Development

No branches or pull requests

4 participants