From c2d7bf3a6e92d9960e4eb1ca4d5f0a65ef93660c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niels=20M=C3=B6ller?= This is an attempt at defining a development target for
- Nettle-3.1, inspired by similar pages for recent GMP releases.
- [Last updated 2015-03-31] Nettle release plans
This really ought to be done before release
@@ -28,29 +28,14 @@ Leave for some later release! -- Review public functions in ecc.h, move some to ecc-internal.h, to - enable sane support for other types of curves. -
-- Add support for curve25519. What about the - "x25519" name? -
-- Update chacha-poly1305 to - the current - draft. -
-- Add support for Ed25519 signatures. -
-- Interface tweaks. EdDSA, Curve25519, base64. +
+ "CRT-hardened" RSA secret key operations. Check that the result of + rsa_compute_root is correct. Should be easy for the + rsa_pkcs1_sign_tr and rsa_decrypt_tr functions, other RSA + functions would need interface changes.
Add larger "safe" curves, e.g., M-383, curve41417 and E-521. @@ -62,19 +47,13 @@ Use side-channel silent GMP functions for RSA and DSA. May require additional interface changes, to use mpn functions.
-- Make it possible to build nettle and hogweed using mini-gmp. -
-+
Side-channel silent mem_equalp.
- Support for using AES acceleration. -
-+
Assembly optimizations for ARMv8 (64-bit).
@@ -85,35 +64,18 @@
+
Use more functions from GMP-6 and later, when available: mpn_sec_add_1, mpn_sec_tabselect, mpn_sec_invert, mpn_cnd_swap, ...
- Document curve25519. -
-- Document EdDSA. +
+ Update SHA3 documentation.
- Support for fat binaries on ARM and x86_64, selecting code at - runtime depending on cpu capabilities. -
-- Fix the handling of optional C source files with make dist. -
-- Stop using the nonstandard .po extension. -
-- Reconsider assembly make rules, going back to an .asm.o: rule - might work better with Solaris' make. -
Update AX_CREATE_STDINT_H to the latest version.
@@ -122,17 +84,17 @@Since xenofarm isn't up and running, do some manual testing: