[gnutls-devel] GnuTLS | Support specifying groups to send in key_share extension (#1710)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Thu May 15 13:31:05 CEST 2025




Daiki Ueno commented: https://gitlab.com/gnutls/gnutls/-/issues/1710#note_2506541296


I think the current behavior, that is to pick 2 or 3 from each "class" of crypto algorithms (EC, DH, RSA, or PQ/T), is sufficient for now, and adding flexibility of choosing key_share algorithms in parallel with supported_groups would complicate the configuration.

Could you perhaps provide a rationale, why we need the further flexibility?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1710#note_2506541296
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250515/af8d78b4/attachment.html>


More information about the Gnutls-devel mailing list