Support for openHiTLS Crypto Library Integration

[xrgy]

Proposal would SPDM community consider adding an implementation to integrate openHiTLS(https://github.com/openHiTLS/openHiTLS) as a cryptographic library? Or, is there any ongoing/planned work in this direction? If the community is interested, we would also be happy to contribute a PR to help enable openHitls crypto library support.

The openHiTLS open-source community is developing rapidly, and the project is attracting more users and contributors.
Compared to other crypto libraries, openHiTLS offers several clear advantages:
1、One of advantages is its highly modular and configurable design, which makes it easy to tailor and minimize for embedded devices with limited resources. This is a perfect match for many SPDM protocol use cases, where devices often have strict memory, storage, and performance constraints.
2、Another advantage of openHiTLS is that certain cryptographic algorithms in the library deliver better performance compared to other commonly used implementations.
3、openHiTLS supports a wider range of post-quantum cryptography algorithms, such as FrodoKEM, compared to other libraries. This enables SPDM and embedded applications to be better prepared for future security challenges brought by quantum computing.

[steven-bellock]

would SPDM community consider adding an implementation to integrate openHiTLS(https://github.com/openHiTLS/openHiTLS) as a cryptographic library?

Yes.

Or, is there any ongoing/planned work in this direction?

No.

One of advantages is its highly modular and configurable design, which makes it easy to tailor and minimize for embedded devices with limited resources.

libspdm has support for MbedTLS and wolfSSL, both of which appear to occupy the same space. Also note that wolfSSL support is "local" to the wolfSSL repository in that they test against libspdm to ensure compatibility, but all their changes stay in their repository. See https://github.com/wolfSSL/wolfssl/blob/master/.github/workflows/libspdm.yml. So that is also an option for openHiTLS.