Support crypto-auditing probes in OpenSSL
Dear colleagues,
In the period of PQ transition it's quite important to have an information about the algorithms that are really used.
https://github.com/openssl/openssl/pull/31971provides crypto-auditing probes using eBPF as an inspection mechanism. This mechanism is used for a while in Fedora/CentOS/Red Hat in NSS and GnuTLS. We would like to bring it into OpenSSL.
Is there a broader community interest in having this mechanism in OpenSSL?
Implement crypto-auditing probes in OpenSSL
proposal by Dmitry Belyavsky Closed Sun 16 Aug 2026 4:00PM
Results
| Results | Option | Votes | % of votes cast | % of eligible voters | |
|---|---|---|---|---|---|
| Looks good | 1 | 50 | 13 | ||
| Could be better | 1 | 50 | 13 |  | |
| Needs a rethink | 0 | 0 | 0 | ||
| Undecided | 6 | 75 |     .jpeg){kind=avatar} |
2 of 8 votes cast (25% participation)
Gordon Tetlow
Thu 6 Aug 2026 4:19PM
I'd like to understand why this approach is limited to Linux since the DTRACE infrastructure exists on FreeBSD. Is it just untested or is it incompatible?
Clemens LangThu 13 Aug 2026 10:04AM
@Gordon Tetlow It's just unimplemented, but it could very likely be done. Building software with user-defined static trace points just works a little different on FreeBSD (and macOS), so for now it was simpler to not enable it.
In fact, with my Red Hat in the corner and my MacPorts cap on, I'd love to eventually add support for macOS' DTRACE implementation for this, which I believe will be very similar to FreeBSD's.
Dmitry Belyavsky ·Thu 13 Aug 2026 9:10AM
@Gordon Tetlow I have no idea about BSD infra - but I think, if it's compatible, a FreeBSD-specific implementation could be added by someone who is interested (also smth similar for Windows)