[asterisk-dev] Deprecating res_crypto and replacement

[Philip Prindeville]

Hi,

I'm working on replacing res_crypto for a variety of reasons.  It's a poor API that's inflexible.  It uses cryptographically deprecated methods and key sizes.  It doesn't support ECC.  It isn't forward compatible with Openssl-3.0.  It doesn't have any test case coverage. etc.

I've identified that:

func/func_aes
chan/chan_iax2
pbx/pbx_dundi
pbx/dundi-parser

use res_crypto.  Is there out-of-tree stuff that requires it as well?

Anyway, I'm working on the requirements for the replacement here:

https://wiki.asterisk.org/wiki/pages/viewpage.action?pageId=49153311

And feedback is appreciated.

Thanks,

-Philip