[Interest] Integrate crypto in Qt project

[Luca Beldi]

I would steer clear of any “simple C++ implementation” when it comes to encryption as it might implement vulnerabilities.
Only use up to date, supported libraries. The most popular choices are libcrypto (OpenSSL) but it’s in C or CryptoC++ https://www.cryptopp.com/
I think the support needed to maintain a crypto library is just too much of a burden to be carried by Qt internally

From: Christophe Thomas [mailto:oxygen77.ct at gmail.com]
Sent: 07 January 2018 18:01
To: interest at qt-project.org
Subject: [Interest] Integrate crypto in Qt project

Hello,

I'm working on a projects that needs to integrate following crypto functions:
- validate signature
- compute hash ==> I found QCryptographiqueHash
- manage certificate ==> I found QSslCertificate
- do some decryption/encryption using blowfish ==> I found some simple C++ implementation that I've added to my project

So I'm blocked on the first subject. I have to admit that I'm not mastering crypto subjects. What I understand:
- I have 3 data:
* a signature => (I only have 2 data named R & S)
* a hash of data (SHA1)
* a public key (p, g, g, y=pub data)
- I should use DSA
- I will get a Correct / Not Correct answer

Any hint on what to use? dive into openssl api ? use QCA project (https://github.com/highfidelity/qca) ?

Thank you

Chris



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20180108/7d385ae4/attachment.html>