Russian GOST cryptography in and near OpenSSL
summary
Work started in 2005 to add Russian GOST algorithms into OpenSSL via a reference implementation and the separate gost-engine (GitHub) rather than mass changes to core OpenSSL; the engine lands in distributions like Fedora and Debian and many patches were upstreamed into OpenSSL 1.0/1.1.x. Concrete outcomes: reference engine code published, EC bug (points at infinity) fixed before 1.1.1, several SHAKE/encoding and non‑Latin x.509 fixes merged, Java providers remain incomplete and trusted root CA bundles for GOST stay scarce.
AI-written summary · about
chapters (13)
- 0:00Introduction to speaker
- 1:24Understanding Russian GOST
- 2:38Early development and challenges
- 6:01Evolution of GOST integration
- 7:16Process of upstream integration
- 9:35Technical implementation hurdles
- 12:37Impact of the Heartbleed incident
- 14:11Collaboration and standardization
- 17:26Current state and limitations
- 22:55Application support and API usage
- 26:01Contributions to the community
- 30:28Resources and acknowledgments
- 33:59Q&A and final thoughts
related talks
29mThe Go Cryptography State of the Union
17mPostquantum algorithms in Fedora now and soon
30mRuby OpenSSL Present Future and Why It Matters
31mGo Security – Past, Present, and Future
50mUsing OP-TEE as a Cryptography Engine
37mOpenSSL Hardware Offload Enhancement
35mOpenSSL's Journey: Technical Updates Governance and Community
34m"The Cryptography State of the Union"