====== Usage of OpenSSL in BASE ======

^ user ^ reason ^ comment ^
| /bin/ed /bin/red | Using libcrypto for des support | We should remove des support |
| /lib/geom/geom_eli.so |  |  |
| <del>/sbin/hastctl /sbin/hastd</del> | for sha256 | Switched to libmd r313192 |
| /usr/bin/dc | Uses for bignum |  |
| /usr/bin/drill |  |  |
| /usr/bin/factor | Uses for BIGNUM |  |
| /usr/bin/hxtool |  |  |
| /usr/bin/kadmin |  |  |
| /usr/bin/kinit |  |  |
| /usr/bin/kpasswd |  |  |
| /usr/bin/ksu |  |  |
| /usr/bin/ntpq |  |  |
| /usr/bin/slogin |  |  |
| /usr/bin/ssh |  |  |
| /usr/bin/ssh-agent |  |  |
| /usr/bin/ssh-keygen |  |  |
| /usr/bin/string2key |  |  |
| /usr/bin/svnlite |  |  |
| /usr/bin/svnlitebench |  |  |
| /usr/bin/svnlitemucc |  |  |
| /usr/bin/svnliterdump |  |  |
| /usr/bin/svnlitesync |  |  |
| /usr/bin/telnet |  |  |
| /usr/lib/libarchive.so.6 | Uses libcrypto for hashes | should be replaced by libmd without option if switch pbkdf2_sha1() will not function |
| /usr/lib/libbsnmp.so.6 |  |  |
| /usr/lib/libfetch.so.6 | Uses libcrypto for md5 and libssl for tls |  |
| /usr/lib/libgssapi_krb5.so.10 |  |  |
| /usr/lib/libgssapi_ntlm.so.10 |  |  |
| /usr/lib/libheimntlm.so.11 |  |  |
| /usr/lib/libhx509.so.11 |  |  |
| /usr/lib/libkdc.so.11 |  |  |
| /usr/lib/libkrb5.so.11 |  |  |
| /usr/lib/libmp.so.7 |  |  |
| /usr/lib/libprivateldns.so.5 |  |  |
| /usr/lib/libprivatessh.so.5 |  |  |
| /usr/lib/libprivateunbound.so.5 |  |  |
| /usr/lib/libradius.so.5 |  |  |
| /usr/libexec/digest-service |  |  |
| /usr/libexec/dma |  |  |
| /usr/libexec/kdigest |  |  |
| /usr/libexec/ssh-keysign |  |  |
| /usr/libexec/ssh-pkcs11-helper |  |  |
| /usr/libexec/telnetd |  |  |
| /usr/libexec/sendmail |  |  |
| /usr/sbin/auditdistd | HMAC / tls |  |
| /usr/sbin/bhyve | DES ECB for VNC password auth |  |
| /usr/sbin/hostapd |  |  |
| /usr/sbin/kstash |  |  |
| /usr/sbin/kutil |  |  |
| /usr/sbin/ntp-keygen |  |  |
| /usr/sbin/ntpupdate |  |  |
| /usr/sbin/ntpdc |  |  |
| /usr/sbin/pkg | Uses it for RSA signature validation |  |  |
| /usr/sbin/ppp |  |  |
| /usr/sbin/sntp |  |  |
| /usr/sbin/sshd |  |  |
| /usr/sbin/tcpdump |  |  |
| /usr/sbin/uefisign | PEM / pkcs7 |  |
| /usr/sbin/unbound |  |  |
| /usr/sbin/unbound-anchor |  |  |
| /usr/sbin/unbound-control |  |  |
| /usr/sbin/wpa_supplicant |  |  |
| /usr/sbin/freebsd-update | openssl rsautl -verify |  |
| /usr/sbin/portsnap | openssl rsautl -verify |  |

====== Alternatives ======

===== General =====

  * libressl
  * borringssl
  * bearssl
  * mbedtls

===== Crypto only =====

  * libmd
  * libtomcrypt

===== BIGNUM =====

  * BSDNT
  * libtommath (and libtomfastmath)

===== extra =====

  * scrypt ([[/ColinPercival|ColinPercival]]) with hmac, pbkdf2 etc.