|
23 | 23 | drngChaCha20 ? false, # set the default drng callback |
24 | 24 | ais2031 ? false, # set the seeding strategy to be compliant with AIS 20/31 |
25 | 25 | sp80090c ? false, # set compliance with NIST SP800-90C |
26 | | - cryptoBackend ? "botan", # set backend for hash and drbg operations |
| 26 | + cryptoBackend ? "builtin", # set backend for hash and drbg operations |
27 | 27 | linuxDevFiles ? true, # enable linux /dev/random and /dev/urandom support |
28 | 28 | linuxGetRandom ? true, # enable linux getrandom support |
29 | 29 | hashSha512 ? false, # set the conditioning hash: SHA2-512 |
30 | 30 | hashSha3_512 ? true, # set the conditioning hash: SHA3-512 |
31 | | - openSSLRandProvider ? true, # build ESDM provider for OpenSSL 3.x |
32 | | - botanRng ? true, # build ESDM class for Botan 3.x |
| 31 | + openSSLRandProvider ? false, # build ESDM provider for OpenSSL 3.x |
| 32 | + botanRng ? false, # build ESDM class for Botan 3.x |
33 | 33 |
|
34 | 34 | # client-related options (handle with care, consult source code and meson options) |
35 | 35 | # leave as is if in doubt |
|
56 | 56 |
|
57 | 57 | assert drngHashDrbg != drngChaCha20; |
58 | 58 | assert hashSha512 != hashSha3_512; |
59 | | -assert |
60 | | - cryptoBackend == "openssl" |
61 | | - || cryptoBackend == "botan" |
62 | | - || cryptoBackend == "builtin" "Unsupported ESDM crypto backend"; |
| 59 | +assert cryptoBackend == "openssl" || cryptoBackend == "botan" || cryptoBackend == "builtin"; |
63 | 60 |
|
64 | 61 | stdenv.mkDerivation rec { |
65 | 62 | pname = "esdm"; |
|
0 commit comments