[Dnsmasq-discuss] Remove ECC-GOST (GOST R 34.10-2001) algorithm as this is set to status MUST NOT implement in RFC 8624

[Simon Kelley]

Indeed. Note that this (and ED448) will not actually be compiled in
until Nettle 3.6, which add support for them, is released and installed.

Cheers,

Simon.



On 02/03/2020 11:16, Vladislav Grishenko wrote:
> Sorry, overlooked it (along with GOST R 34.11-94) must not be used for signing/delegation, but still may - for validation.
> Please ignore previous mail.
> 
> Best Regards, Vladislav Grishenko
> 
> -----Original Message-----
> From: Vladislav Grishenko <themiron.ru at gmail.com> 
> Sent: Sunday, March 1, 2020 10:00 PM
> To: 'Simon Kelley' <simon at thekelleys.org.uk>; dnsmasq-discuss at lists.thekelleys.org.uk
> Subject: Remove ECC-GOST (GOST R 34.10-2001) algorithm as this is set to status MUST NOT implement in RFC 8624
> 
> Hi Simon,
> 
> Thank you for the DSA update.
> According https://tools.ietf.org/html/rfc8624 ECC-GOST must not be implemented too:
> 
>    ECC-GOST (GOST R 34.10-2001) has been superseded by GOST R 34.10-2012
>    in [RFC7091].  GOST R 34.10-2012 hasn't been standardized for use in
>    DNSSEC.
> 
> Maybe worth to drop it too and save a couple of bytes?
> 
> Thank you and
> Best Regards, Vladislav Grishenko
> 
> 
> 
>