Post
Topic
Board Development & Technical Discussion
Merits 1 from 1 user
Re: What should cryptography library should I use?
by
ETFbitcoin
on 20/08/2023, 10:53:53 UTC
⭐ Merited by vapourminer (1)
Have you checked LibreSSL?

I just assumed that I would be using OpenSSL, but I have discovered that with OpenSSL 3, all of the "low-level" functionality has been deprecated, and that is exactly what I was intending to use. Perhaps, I could use the "high-level" features, but I don't know how or if they even do what I need. Also, I can't find any examples of anyone using these features anywhere, which is weird.

Perhaps sticking with a legacy version of OpenSSL is a good solution.

Looking at CVE list on OpenSSL website[1], it looks like older version (2.X and 1.X) still got security fix. So using legacy version of OpenSSL isn't bad solution. But on long term, i expect you'll need to find way to compile legacy OpenSSL on new system/OS.

[1] https://www.openssl.org/news/vulnerabilities.html