OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Virtual private networks »
  • New ciphers in OpenSense
« previous next »
  • Print
Pages: [1]

Author Topic: New ciphers in OpenSense  (Read 239 times)

Linfern

  • Newbie
  • *
  • Posts: 1
  • Karma: 0
    • View Profile
New ciphers in OpenSense
« on: March 18, 2023, 05:53:00 am »
Hello!
The question is: how can I add support for Russian GOST encryption algorithms to OpenSense?
What steps need to be taken for this?
Maybe someone has ready-made images for this.
Logged

meyergru

  • Sr. Member
  • ****
  • Posts: 388
  • Karma: 39
    • View Profile
    • congenio
Re: New ciphers in OpenSense
« Reply #1 on: March 18, 2023, 12:10:37 pm »
I bet this would be hard and I doubt anyone has done this:

1. Current OpnSense versions have dropped support for LibreSSL and rely on OpenSSL 1.1.1.
2. OpenSSL has dropped GOST support since 1.1.0 (https://techglimpse.com/solved-openssl-library-has-no-gost-support/) - and for a good reason.

Before you bother to look into this, have a look at the cryptanalysis section here: https://en.wikipedia.org/wiki/GOST_(block_cipher)#Cryptanalysis_of_GOST - essentially, GOST is a weak cipher.
« Last Edit: March 18, 2023, 12:14:29 pm by meyergru »
Logged
DEC760 - the model that Deciso never built

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Virtual private networks »
  • New ciphers in OpenSense
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2