intel / intel/QAT_Engine

How to support group X25519 using qat_hw and qat_sw in my own SSL/TLS server application? Many thanks in advance.

Open
#182 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
443
Forks
137
PR merge metrics
No merged PRs in 30d

Description

I'd like to support group X25519 using qat_hw and qat_sw in my own SSL/TLS server as Google.com does.
openssl s_client -cipher kEECDH -curves X25519 -tls1_3 -connect www.google.com:443
To be more precise, in Client Hello, there are 2 extensions, x25519 in supported groups and key share.
In Server Hello, extension key_share uses Group x25519.

I've already succeeded to achieve it with openssl-1.1.1a and without QAT using the following code.
SSL_CTX_set1_curves_list(sc->ctx, "X25519:prime256v1");

Currently, I'd like to support the similar feature with QAT and my code already contains QAT engine loading process such as ENGINE_set_default() and various ENGINE_ctrl_cmd_string().
So I have two questions:
1.Does QAT supports my above requirement?
2.If the answer to question 1 is yes, which API should I add extrally?

Thanks,
Syllinia

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.