Re: Pkcs7 crypto verification without openSSL

["Tomas Pilar (tpilar)" <tpilar@solarflare.com>]

On 03/12/2018 12:40, Ard Biesheuvel wrote:
> On Wed, 28 Nov 2018 at 18:40, Tomas Pilar (tpilar)
> <tpilar@solarflare.com> wrote:
>> Hi,
>>
>> Are there any plans for a crypto library that does not pull in openSSL? When I try to add BaseCryptLib to be able to use FmpAuthenticationLib, my driver size baloons significantly (increase of ~0x30000) and it seems like a basic public SHA256 crypto check library should not be _that_ large?
> Well, I'd expect the code size to come from the asymmetric crypto, not
> from the SHA256 hash code. Which FmpAuthenticationLib are you using?
Yes, that makes sense. I am using the FmpAuthenticationLibPkcs7 from SecurityPkg which pulls in BaseCryptLib. I would assume that the linker only links the functions which are referenced so it should not pull in the entire library but I expect some overgeneric helpers might be quite large.

Cheers,
Tom