TinyCrypt end of life - Help needed


Flavio Ceolin
 

Hello,

Recently Intel notify us about TinyCrypt end of life because Zephyr is
one major project still using it.

In order to respond it properly, the Zephyr PSIRT team needs to
understand how TinyCrypt is currently used on Zephyr. An
initial research shows that only the Bluetooth subsystem depends
(exclusively) on this library for hashing and elliptic curves.

We need the community feedback to know which other places are using
TinyCrypt, which features are being used and finally what is the most
constraint platform currently supported that is using TinyCrypt.

Based on the answers we will come up with some proposals to mitigate
this problem.

Regards,
Flavio Ceolin


Bolivar, Marti
 

Hi Flavio - it seems like this should be sent to users@ too, no?

On Fri, Oct 01 2021, Flavio Ceolin via lists.zephyrproject.org wrote:
Hello,

Recently Intel notify us about TinyCrypt end of life because Zephyr is
one major project still using it.

In order to respond it properly, the Zephyr PSIRT team needs to
understand how TinyCrypt is currently used on Zephyr. An
initial research shows that only the Bluetooth subsystem depends
(exclusively) on this library for hashing and elliptic curves.

We need the community feedback to know which other places are using
TinyCrypt, which features are being used and finally what is the most
constraint platform currently supported that is using TinyCrypt.

Based on the answers we will come up with some proposals to mitigate
this problem.

Regards,
Flavio Ceolin



Flavio Ceolin
 

Good point, will forward to that list too.

Hi Flavio - it seems like this should be sent to users@ too, no?

On Fri, Oct 01 2021, Flavio Ceolin via lists.zephyrproject.org wrote:
Hello,

Recently Intel notify us about TinyCrypt end of life because Zephyr is
one major project still using it.

In order to respond it properly, the Zephyr PSIRT team needs to
understand how TinyCrypt is currently used on Zephyr. An
initial research shows that only the Bluetooth subsystem depends
(exclusively) on this library for hashing and elliptic curves.

We need the community feedback to know which other places are using
TinyCrypt, which features are being used and finally what is the most
constraint platform currently supported that is using TinyCrypt.

Based on the answers we will come up with some proposals to mitigate
this problem.

Regards,
Flavio Ceolin



Flavio Ceolin
 

Send it to users list as well.

Hello,

Recently Intel notify us about TinyCrypt end of life because Zephyr is
one major project still using it.

In order to respond it properly, the Zephyr PSIRT team needs to
understand how TinyCrypt is currently used on Zephyr. An
initial research shows that only the Bluetooth subsystem depends
(exclusively) on this library for hashing and elliptic curves.

We need the community feedback to know which other places are using
TinyCrypt, which features are being used and finally what is the most
constraint platform currently supported that is using TinyCrypt.

Based on the answers we will come up with some proposals to mitigate
this problem.

Regards,
Flavio Ceolin



Szymon Janc
 

Hi,

There is no information about tinycrypt being EOL on webpage nor github...


On Fri, 1 Oct 2021 at 22:37, Flavio Ceolin <flavio.ceolin@...> wrote:
Send it to users list as well.

> Hello,
>
> Recently Intel notify us about TinyCrypt end of life because Zephyr is
> one major project still using it.
>
> In order to respond it properly, the Zephyr PSIRT team needs to
> understand how TinyCrypt is currently used on Zephyr. An
> initial research shows that only the Bluetooth subsystem depends
> (exclusively) on this library for hashing and elliptic curves.
>
> We need the community feedback to know which other places are using
> TinyCrypt, which features are being used and finally what is the most
> constraint platform currently supported that is using TinyCrypt.
>
> Based on the answers we will come up with some proposals to mitigate
> this problem.
>
> Regards,
> Flavio Ceolin
>
>
>







--
pozdrawiam
Szymon K. Janc