Implement ECDH-ES

[lawliet89]

Probably not the AES**KW variants because ring does not seem to support AESKW.

[vladikoff]

is still in the works?

There is some mention of ECDH-ES in the source

biscuit/src/jwa.rs

Line 418 in e578b40

ECDH_ES => KeyManagementAlgorithmType::DirectKeyAgreement,

, what's currently missing?

[lawliet89]

Support from the Crypto library (ring) is missing. I haven't had the time to implement it with Openssl instead.

On Thu, 16 Nov 2017, 23:38 Vlad Filippov, ***@***.***> wrote: is still in the works? There is some mention of ECDH-ES in the source https://github.com/lawliet89/biscuit/blob/e578b4071fb7315dbe9d84d05b2d81672887151e/src/jwa.rs#L418 , what's currently missing? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#74 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AA8APeZzAU7eYuHhjce_0Ea3ITFLAQ1Dks5s3FcEgaJpZM4NFp9F> .

-- Regards Yong Wen

[briansmith]

There are two PRs for ring to implement briansmith/ring#331, which would allow this to be implemented using ring, I believe.

[lawliet89]

Thanks @briansmith for letting me know. I'll keep a lookout.