Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable Dilithium and SPHINCS+ sig algs by default #406

Closed
wants to merge 1 commit into from

Commits on May 1, 2024

  1. Disable Dilithium and SPHINCS+ sig algs by default

    This fixes open-quantum-safe#399
    
    With the current default enabled sig algs, some servers may fail to
    complete the TLS handshake. This is probably not an OpenSSL or
    oqsprovider bug but a buggy TLS implementation on the server side. I
    guess something similar to what is described in https://tldr.fail/.
    
    Until the issue is better understood, let's enable less sig algs by
    default so that the changes of users being affected by this issue are
    lower.
    
    The only file manually edited was oqs-template/generate.yml with
    
    ```shell
    sed -i -e 's/enable: true/enable: false/g' oqs-template/generate.yml
    sed -i -e '552,660s/enable: false/enable: true/g' oqs-template/generate.yml
    sed -i -e '661,763s/enable: false/enable: true/g' oqs-template/generate.yml
    ```
    
    The rest of the files were generated with
    
    ```shell
    bash oqs-template/generate.sh
    ```
    
    Signed-off-by: Iyán Méndez Veiga <[email protected]>
    iyanmv committed May 1, 2024
    Configuration menu
    Copy the full SHA
    4177d6e View commit details
    Browse the repository at this point in the history