This is an old revision of the document!
Usage of OpenSSL in BASE
| user | reason | comment | |
|---|---|---|---|
| /bin/ed /bin/red | Using libcrypto for des support | We should remove des support | |
| /lib/geom/geom_eli.so | |||
| | for sha256 | Switched to libmd r313192 | |
| /usr/bin/dc | Uses for bignum | ||
| /usr/bin/drill | |||
| /usr/bin/factor | Uses for BIGNUM | ||
| /usr/bin/hxtool | |||
| /usr/bin/kadmin | |||
| /usr/bin/kinit | |||
| /usr/bin/kpasswd | |||
| /usr/bin/ksu | |||
| /usr/bin/ntpq | |||
| /usr/bin/slogin | |||
| /usr/bin/ssh | |||
| /usr/bin/ssh-agent | |||
| /usr/bin/ssh-keygen | |||
| /usr/bin/string2key | |||
| /usr/bin/svnlite | |||
| /usr/bin/svnlitebench | |||
| /usr/bin/svnlitemucc | |||
| /usr/bin/svnliterdump | |||
| /usr/bin/svnlitesync | |||
| /usr/bin/telnet | |||
| /usr/lib/libarchive.so.6 | Uses libcrypto for hashes | should be replaced by libmd without option if switch pbkdf2_sha1() will not function | |
| /usr/lib/libbsnmp.so.6 | |||
| /usr/lib/libfetch.so.6 | Uses libcrypto for md5 and libssl for tls | ||
| /usr/lib/libgssapi_krb5.so.10 | |||
| /usr/lib/libgssapi_ntlm.so.10 | |||
| /usr/lib/libheimntlm.so.11 | |||
| /usr/lib/libhx509.so.11 | |||
| /usr/lib/libkdc.so.11 | |||
| /usr/lib/libkrb5.so.11 | |||
| /usr/lib/libmp.so.7 | |||
| /usr/lib/libprivateldns.so.5 | |||
| /usr/lib/libprivatessh.so.5 | |||
| /usr/lib/libprivateunbound.so.5 | |||
| /usr/lib/libradius.so.5 | |||
| /usr/libexec/digest-service | |||
| /usr/libexec/dma | |||
| /usr/libexec/kdigest | |||
| /usr/libexec/ssh-keysign | |||
| /usr/libexec/ssh-pkcs11-helper | |||
| /usr/libexec/telnetd | |||
| /usr/libexec/sendmail | |||
| /usr/sbin/auditdistd | HMAC / tls | ||
| /usr/sbin/hostapd | |||
| /usr/sbin/kstash | |||
| /usr/sbin/kutil | |||
| /usr/sbin/ntp-keygen | |||
| /usr/sbin/ntpupdate | |||
| /usr/sbin/ntpdc | |||
| /usr/sbin/pkg | Uses it for RSA signature validation | ||
| /usr/sbin/ppp | |||
| /usr/sbin/sntp | |||
| /usr/sbin/sshd | |||
| /usr/sbin/tcpdump | |||
| /usr/sbin/uefisign | PEM / pkcs7 | ||
| /usr/sbin/unbound | |||
| /usr/sbin/unbound-anchor | |||
| /usr/sbin/unbound-control | |||
| /usr/sbin/wpa_supplicant |
Alternatives
General
- libressl
- borringssl
- bearssl
- mbedtls
Crypto only
- libmd
- libtomcrypt
BIGNUM
- BSDNT
- libtommath (and libtomfastmath)