Unify crypto libraries (versions and packages)

Value

Less crypto libraries means less possible attacks and better-tested code.

Description

Review the crypto libraries and find out which ones can be unified (one version in the tree), replaced to limit the number of libraries.

Acceptance Criteria

Analysis done, conclusions implemented.

Applicable Market Segments

• All
• Security

Applicable Personas

• Software Quality Auditor
• License Compliance Auditor

added to epic &107 (closed)

added teamsecurity label

set weight to 10

changed milestone to %goofy alpha

changed milestone to %goofy beta

changed the description

changed iteration to Oniro Core Iterations Jul 1, 2022 - Jul 31, 2022

added Doing label

Security libraries with multiple versions:

tpm2*
u-boot

assigned to @mrybczyn

changed iteration to Oniro Core Iterations Aug 1, 2022 - Aug 31, 2022

Crypto lib analysis on August 1st, 2022 crypto_libs_2022_08_01.ods

We have pretty unified versions. Could remove the number of libraries however.

For info @landgraf @idlethread @agherzan

Hi @mrybczyn , only to clarify, we did analysis of the libraries and have the list of unified versions. Are we going to do something with it or not needed?

Ah a sentence from the closing message was missing.

The analysis shows that we are fine, but can remove two libraries if we decide to disable libmicrohttpd that pulls them. I have created a separate ticket for this as need to verify if someone needs it: #759 (closed)

Clear now. Thanks!

mentioned in issue #759 (closed)

set weight to 5

closed

removed Doing label