Usage of OpenSSL in BASE
user |
reason |
comment |
|
/bin/ed /bin/red |
Using libcrypto for des support |
We should remove des support |
|
/lib/geom/geom_eli.so |
|
|
|
/sbin/hastctl /sbin/hastd |
for sha256 |
Switched to libmd r313192 |
|
/usr/bin/dc |
Uses for bignum |
|
|
/usr/bin/drill |
|
|
|
/usr/bin/factor |
Uses for BIGNUM |
|
|
/usr/bin/hxtool |
|
|
|
/usr/bin/kadmin |
|
|
|
/usr/bin/kinit |
|
|
|
/usr/bin/kpasswd |
|
|
|
/usr/bin/ksu |
|
|
|
/usr/bin/ntpq |
|
|
|
/usr/bin/slogin |
|
|
|
/usr/bin/ssh |
|
|
|
/usr/bin/ssh-agent |
|
|
|
/usr/bin/ssh-keygen |
|
|
|
/usr/bin/string2key |
|
|
|
/usr/bin/svnlite |
|
|
|
/usr/bin/svnlitebench |
|
|
|
/usr/bin/svnlitemucc |
|
|
|
/usr/bin/svnliterdump |
|
|
|
/usr/bin/svnlitesync |
|
|
|
/usr/bin/telnet |
|
|
|
/usr/lib/libarchive.so.6 |
Uses libcrypto for hashes |
should be replaced by libmd without option if switch pbkdf2_sha1() will not function |
|
/usr/lib/libbsnmp.so.6 |
|
|
|
/usr/lib/libfetch.so.6 |
Uses libcrypto for md5 and libssl for tls |
|
|
/usr/lib/libgssapi_krb5.so.10 |
|
|
|
/usr/lib/libgssapi_ntlm.so.10 |
|
|
|
/usr/lib/libheimntlm.so.11 |
|
|
|
/usr/lib/libhx509.so.11 |
|
|
|
/usr/lib/libkdc.so.11 |
|
|
|
/usr/lib/libkrb5.so.11 |
|
|
|
/usr/lib/libmp.so.7 |
|
|
|
/usr/lib/libprivateldns.so.5 |
|
|
|
/usr/lib/libprivatessh.so.5 |
|
|
|
/usr/lib/libprivateunbound.so.5 |
|
|
|
/usr/lib/libradius.so.5 |
|
|
|
/usr/libexec/digest-service |
|
|
|
/usr/libexec/dma |
|
|
|
/usr/libexec/kdigest |
|
|
|
/usr/libexec/ssh-keysign |
|
|
|
/usr/libexec/ssh-pkcs11-helper |
|
|
|
/usr/libexec/telnetd |
|
|
|
/usr/libexec/sendmail |
|
|
|
/usr/sbin/auditdistd |
HMAC / tls |
|
|
/usr/sbin/bhyve |
DES ECB for VNC password auth |
|
|
/usr/sbin/hostapd |
|
|
|
/usr/sbin/kstash |
|
|
|
/usr/sbin/kutil |
|
|
|
/usr/sbin/ntp-keygen |
|
|
|
/usr/sbin/ntpupdate |
|
|
|
/usr/sbin/ntpdc |
|
|
|
/usr/sbin/pkg |
Uses it for RSA signature validation |
|
|
/usr/sbin/ppp |
|
|
|
/usr/sbin/sntp |
|
|
|
/usr/sbin/sshd |
|
|
|
/usr/sbin/tcpdump |
|
|
|
/usr/sbin/uefisign |
PEM / pkcs7 |
|
|
/usr/sbin/unbound |
|
|
|
/usr/sbin/unbound-anchor |
|
|
|
/usr/sbin/unbound-control |
|
|
|
/usr/sbin/wpa_supplicant |
|
|
|
/usr/sbin/freebsd-update |
openssl rsautl -verify |
|
|
/usr/sbin/portsnap |
openssl rsautl -verify |
|
Alternatives
General
- libressl
- borringssl
- bearssl
- mbedtls
Crypto only
- libmd
- libtomcrypt
BIGNUM
- BSDNT
- libtommath (and libtomfastmath)
extra
scrypt (ColinPercival) with hmac, pbkdf2 etc.