Hi,
I sent mail to libzrtpcpp developer, he answered that disabling elliptic curve stuff is not a good idea (libzrtpcpp built now without EC).
Other distributins seem to have no problem with it because openSSL does not use any of the patented enhancements for elliptic curve computations. I know, some time ago there were discussions about this. However, Certicom lost the law suits regarding their ECC patents. For more infor please refer to
So, if openSSL does not use patented ECC algorithms then maybe it can be re-enabled in openssl package?
On 12/26/2011 05:56 PM, alekcejk@googlemail.com wrote:
Hi,
I tried to build libzrtpcpp-2.0.0 (see http://ftp.gnu.org/gnu/ccrtp/ ). But it is impossible to build it in Fedora because openssl/ec.h is disabled in openssl which is build with no-ec option.
libzrtpcpp/crypto/openssl/ZrtpDH.cpp:46:24: fatal error: openssl/ec.h: No such file or directory
Is it possible to build openssl with enabled openssl/ec.h? If this is impossible is there any workaround for building libzrtpcpp-2.0.0?
Not at this time. I am researching this issue, and hopefully we will be able to enable ec in the future.
~tom
== Fedora Project
On 02/22/2012 06:45 PM, alekcejk@googlemail.com wrote:
Hi,
I sent mail to libzrtpcpp developer, he answered that disabling elliptic curve stuff is not a good idea (libzrtpcpp built now without EC).
Please refrain from basing arguments on whether something should be enabled or disabled in Fedora based solely upon the fact that "others are doing it".
Fedora is legally part of Red Hat, and Red Hat has certain legal obligations it is required to adhere to, based on the fact that it is a US Company.
Elliptic Curve Cryptography is currently being reviewed. At this point in time, it must not be included or enabled in Fedora.
~tom
== Fedora Project
-
alekcejk＠googlemail.com -
Tom Callaway