Current state of Tinc 1.1?

[Guus Sliepen]

On Sun, Dec 28, 2014 at 05:00:43PM +0000, Pedro Côrte-Real wrote:

> > Although the cryptography is now separated from the rest of the logic in
> > tinc, it is not really replaceable, since only OpenSSL is supported.
> > However, there is also a new protocol in tinc 1.1, which uses Ed25519
> > and ChaCha-Poly1305. The code for those algorithms is included in tinc,
> > so the new protocol has no dependencies on external libraries.
> 
> Any reason not to use libsodium for this?

I think that at the moment I was looking at it, libsodium was not yet in
Debian. I opted to take libraries for Ed25519 and ChaCha-Poly1305 which
looked most convenient and just merged the code into tinc. The reasons I
used then might not be valid anymore now, but I don't see a good reason
to switch to an external library now. If there are arguments for it,
let me know.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20141228/c7bcf411/attachment.sig>