[Bug 271615] Update base system OpenSSL to 3.0.x

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 04 Mar 2024 04:19:51 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=271615

--- Comment #22 from Pierre Pronchery <khorben@defora.org> ---
(In reply to Gleb Popov from comment #21)

When importing OpenSSL 3 in the base system, I used the same options as the
security/openssl-devel port (now security/openssl) did at the time, where I
believe SM3 was disabled by default. From what I can tell, the
security/openssl31 port also defaults to disabling the SM2, SM3, and SM4
algorithms.

We can revisit this if some algorithms should really be available but are
disabled by default.

FWIW, judging from https://en.wikipedia.org/wiki/SM3_(hash_function) it seems
SM3 is "considered similar to SHA-256 in security and efficiency," and
originating from China's National Cryptography Administration in 2010.

-- 
You are receiving this mail because:
You are the assignee for the bug.