Hi,
On 7/1/2025 3:41 AM, Dan Carpenter wrote:
On Mon, Jun 30, 2025 at 09:39:30PM +0800, Gu Bowen wrote:
To reintroduce the sm2 algorithm, the patch set did the following:
- Reintroduce the mpi library based on libgcrypt.
- Reintroduce ec implementation to MPI library.
- Rework sm2 algorithm.
- Support verification of X.509 certificates.
Remind me, why did we remove these?
At first, the process of calculating the digest with the SM2 certificate
was coupled with the signature verification process, and this
unreasonable situation was corrected with commit e5221fa6a355 ("KEYS:
asymmetric: Move sm2 code into x509_public_key "). However, this commit
also caused SM2 to be unable to verify secondary certificates due to its
special implementation. This issue was not resolved, which led to the
removal of the sm2 algorithm.
