Navigation Menu

Skip to content

Instantly share code, notes, and snippets.

@Jolly-Pirate
Forked from h-yamamo/ChaCha+Camellia.md
Created October 30, 2017 06:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Jolly-Pirate/676e062b6a756cec7611f3606e981042 to your computer and use it in GitHub Desktop.
Save Jolly-Pirate/676e062b6a756cec7611f3606e981042 to your computer and use it in GitHub Desktop.
Support ChaCha20-Poly1305 and Camellia-GCM for debian and ubuntu openssl package

Support ChaCha20-Poly1305 and Camellia-GCM for debian and ubuntu openssl package

In order to easily build, I made sets of patches that resolved conflicts (chacha20-poly1305, camellia-gcm, equal-preference-group).

How to build

Ubuntu 16.04 LTS (xenial)

# In some directory
git clone -b xenial --depth 1 https://gist.github.com/h-yamamo/474f5cb1e0d93638027785f57b4b7ea1
apt-get -d source openssl
tar xf openssl_1.0.2g.orig.tar.gz
cd openssl-1.0.2g
tar xf ../openssl_1.0.2g-1ubuntu4.8.debian.tar.xz
tar xvf ../474f5cb1e0d93638027785f57b4b7ea1/debian.txz
debuild -uc -us

And then, here is that added X25519 support (curve25519.patch).

git clone -b xenial_p1 --depth 1 https://gist.github.com/h-yamamo/474f5cb1e0d93638027785f57b4b7ea1

Debian 8 (jessie-backports)

# In some directory
git clone -b jessie-backports --depth 1 https://gist.github.com/h-yamamo/474f5cb1e0d93638027785f57b4b7ea1
apt-get -d source openssl
tar xf openssl_1.0.2l.orig.tar.gz
cd openssl-1.0.2l
tar xf ../openssl_1.0.2l-1~bpo8+1.debian.tar.xz
tar xvf ../474f5cb1e0d93638027785f57b4b7ea1/debian.txz
debuild -uc -us

And then, here is that added X25519 support (curve25519.patch).

git clone -b jessie-backports_p1 --depth 1 https://gist.github.com/h-yamamo/474f5cb1e0d93638027785f57b4b7ea1

Debian 9 (stretch)

Since openssl1.0 is used by apache2 on stretch, I decided to make patches for openssl1.0. This includes curve25519, chacha20-poly1305, camellia-gcm and equal-preference-group.

# In some directory
git clone -b stretch_p1 --depth 1 https://gist.github.com/h-yamamo/474f5cb1e0d93638027785f57b4b7ea1
apt-get -d source openssl1.0
tar xf openssl1.0_1.0.2l.orig.tar.gz
cd openssl-1.0.2l
tar xf ../openssl1.0_1.0.2l-2.debian.tar.xz
tar xvf ../474f5cb1e0d93638027785f57b4b7ea1/debian.txz
debuild -uc -us
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment