aboutsummaryrefslogtreecommitdiffstats
path: root/doc/dev/todo.rst
blob: 870fd294cec55c60ce21a3a709104cf883177c36 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
Todos
========================================

These are features either requested by users or that seem like
potentially useful things to have. Several are quite self-contained
and could make a quick project.

Send any additions to the mailing list.

Basic Algorithms
----------------------------------------

 * scrypt
 * BLAKE2
 * EdDSA
 * SipHash
 * Skein-MAC
 * IETF standard HKDF (RFC 5869)
 * ARIA (Korean block cipher, RFCs 5794 and 6209)
 * Extend Cascade_Cipher to support arbitrary number of ciphers

TLS
----------------------------------------

 * Authentication using TOFU
 * Certificate pinning (using TACK?)
 * TLS OCSP stapling (RFC 6066)
 * Compression (deflate, lzma, ...)
 * ALPN (RFC 7301)
 * Encrypt-then-MAC extension (RFC 7366)
 * TLS supplemental authorization data (RFC 4680, RFC 5878)
 * OpenPGP authentication (RFC 5081)
 * DTLS-SCTP (RFC 6083)
 * Perspectives (http://perspectives-project.org/)

PKIX
----------------------------------------

* OCSP responder logic
* X.509 attribute certificates (RFC 5755)

ECC / BigInt / Math
----------------------------------------

* Fast reductions for P-256 and P-384
* MP asm optimizations - SSE2, ARM/NEON, ...

New Protocols
----------------------------------------

* Off-The-Record message protocol
* Some useful subset of OpenPGP
* SSHv2 server
* Cash schemes (such as Lucre, credlib, bitcoin?)

Accelerators / backends
----------------------------------------

* /dev/crypto
* Windows CryptoAPI
* Apple CommonCrypto
* ARMv8 crypto extensions
* Intel Skylake SHA-1/SHA-2

FFI
----------------------------------------

* Expose TLS to Python
* Expose ECC to Python