BSD Ports

devel/olm 3.2.16p0 OpenBSD

Double Ratchet cryptographic ratchet in C++

System
OpenBSD
Repository
OpenBSD ports
Maintainer
The OpenBSD ports mailing-list <[email protected]>
Categories
devel, security

Description

An implementation of the Double Ratchet cryptographic ratchet described by https://whispersystems.org/docs/specifications/doubleratchet/, written in C and C++11 and exposed as a C API.

IMPORTANT: libolm is now deprecated.

libolm was Matrix's first implementation of the Double Ratchet algorithm, dating back to 2015. It is not written in memory-safe langauges (C and C++11), resulting in several CVEs over the years (e.g. CVE-2021-34813 and CVE-2021-44538). It also depends on simplistic cryptography primitive implementations which are intended for pragmatic and education purposes rather than security - e.g. Brad Conte's crypto-algorithms.

As a result, the libolm team rewrote libolm in Rust in December 2021 - the result being vodozemac, and announced it as the recommended successor to libolm after its audit by Least Authority in May 2022.

In the other systems

SystemPortVersion
OpenBSDdevel/olm3.2.16p0
FreeBSDsecurity/olm3.2.13
NetBSDsecurity/olm3.2.16
DragonFlysecurity/olm3.2.13
HardenedBSDsecurity/olm3.2.13
GhostBSDsecurity/olm3.2.13

Install

Binary package:

pkg_add olm

From the ports tree:

cd /usr/ports/devel/olm && make install

Dependencies

Build dependencies 2