cloudflare / cloudflare/boring
Allow disabling non-NIST algorithms
Open
- Dominant language
- Rust
- Stars
- 522
- Forks
- 171
- PR merge metrics
- No merged PRs in 30d
Description
X25519 can be disabled via the API, but upstream BoringSSL doesn't have a good way to disable ChaCha20Poly1305, which we want to do in some contexts. (This is currently implemented with setting an obsolete compliance policy via `set_compliance_policy()`, but this is fragile and doesn't do exactly what we want it to do.)
Contributor guide
Assessment
This issue has not been assessed yet.