[ANN] elliptic curves - maintainable and verified (full stack, from primitives to TLS)

Community
, , , ,
1

Dear friends,

over the last month I worked on upgrading the cryptography stack for OCaml and MirageOS. I just published a blog post. Enhancments of OCaml-TLS (usenix security paper from 2015) and X.509 are in place.

The main achievement after TLS 1.3 support (since May 2020, 0.12.0) is that elliptic curve certificates are now supported. Elliptic curve cryptography uses fiat. The X509 implementation now supports PKCS 12 (used by browsers and other software (e.g. OpenVPN) to bundle certificates and private keys).

Get mirage-crypto-ec, x509 0.13.0 and tls 0.13.1 (all available in the opam-repository). Discussion and feedback appreciated.

20 Likes
2

I stumbled upon the mirage-crypto work you’ve been doing this weekend while adding a new feature to a project. Thank. You. Before I was trying to use nocrypto but would have to flip to cryptokit for some things because it was a bit easier in cryptokit. With mirage-crypto I was able to entirely switch over to it and it addresses everything I need.

Thanks!

2 Likes
3

great to hear that mirage-crypto is useful for your projects :smiley:

1 Like