dropbear with external libtommath/libtomcrypt

Peter Korsgaard peter at korsgaard.com
Sat Apr 16 17:29:02 AWST 2016


Hi,

We've recently received patches in Buildroot (http://buildroot.org) to
build libtommath/libtomcrypt (statically) seperately and link dropbear
against those instead of the bundled copies.

In general we prefer to use system libraries instead of bundled versions
whenever possible, but as dropbear is security sensitive I wanted to
check before making the change.

I see that the bundled copies contain local changes. What is the
pro/cons of using the bundled versions vs external?

-- 
Bye, Peter Korsgaard


More information about the Dropbear mailing list