aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJack Lloyd <[email protected]>2015-07-04 10:05:33 -0400
committerJack Lloyd <[email protected]>2015-07-04 10:05:33 -0400
commitb71e47949e2810f27bfb57e13e42be9c499a8641 (patch)
tree1f6fb74059c12298949c179eea1d223e75f80cbd
parenta5e7995e1740a6b5d40f635dcd72656f12e08c96 (diff)
Move feature requests from old bugzilla to todo.rst
-rw-r--r--doc/todo.rst20
1 files changed, 19 insertions, 1 deletions
diff --git a/doc/todo.rst b/doc/todo.rst
index b2fbed189..4df00ee83 100644
--- a/doc/todo.rst
+++ b/doc/todo.rst
@@ -13,6 +13,9 @@ Symmetric Algorithms, Hashes, ...
* Bitsliced AES or Camellia
* Camellia with AES-NI
* Serpent using AVX2
+* Serpent using SSSE3 pshufb for sboxes
+* ChaCha20 using SSE2 or AVX2
+* SHA-512 using SSE2 (to access 64-bit math on x86-32)
* scrypt
* BLAKE2b
* Skein-MAC
@@ -24,8 +27,14 @@ Public Key Crypto, Math
* EdDSA
* Ed448-Goldilocks
+* Support mixed hashes and non-empty param strings in OAEP
* Fast new implementations/algorithms for ECC point operations,
Montgomery multiplication, multi-exponentiation, ...
+* Some PK operations, especially RSA, have extensive computations per
+ operation setup but many of the computed values depend only on the
+ key and could be shared across operation objects.
+* Have BigInt '%' and '/' operators compute and cache the Barrett
+ reduction value on the BigInt.
TLS
----------------------------------------
@@ -42,6 +51,9 @@ TLS
PKIX
----------------------------------------
+* Support multiple DNS names in certificates
+* X.509 name constraints
+* X.509 policy constraints
* OCSP responder logic
* X.509 attribute certificates (RFC 5755)
@@ -53,10 +65,16 @@ New Protocols
* SSHv2 client and/or server
* Cash schemes (such as Lucre, credlib, bitcoin?)
+Library Infrastructure
+----------------------------------------
+* Add logging callbacks
+* Add latency tracing framework
+* Compute cycles/byte estimates for benchmark output
+
Accelerators / backends
----------------------------------------
-* Improve OpenSSL provider (add cipher modes, RSA, etc)
+* Extend OpenSSL provider (cipher modes, ECDH, ECDSA, HMAC)
* /dev/crypto
* Windows CryptoAPI
* Apple CommonCrypto