On Sat, Nov 19, 2016 at 06:30:06PM +0100, Bernd Zeimetz wrote: > On 11/17/2016 12:40 AM, Kurt Roeckx wrote: > > On Mon, Nov 14, 2016 at 07:10:00PM +0000, Niels Thykier wrote: > >> > >> The alternative for ChaCha20 would be to adopt Cloudflare's patches[1], > >> but that sort of assumes that you are only interested in openssl 1.1 for > >> ChaCha20 (and not the other changes). > > > > I'm not willing to maintain such a patch. > > Understandable. Did you talk to upstream about the issue? What do they say?
Chacha20 would be a new feature. Following the policy that can't be added in a 1.0.2 version, only bugs get fixed in it. We made a new release with new features, that version is 1.1.0. Kurt
