From owner-freebsd-arch@FreeBSD.ORG Tue Feb 10 17:19:29 2015 Return-Path: Delivered-To: arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8334E694 for ; Tue, 10 Feb 2015 17:19:29 +0000 (UTC) Received: from mail-pa0-x22f.google.com (mail-pa0-x22f.google.com [IPv6:2607:f8b0:400e:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 52B21A7E for ; Tue, 10 Feb 2015 17:19:29 +0000 (UTC) Received: by mail-pa0-f47.google.com with SMTP id lj1so42578441pab.6 for ; Tue, 10 Feb 2015 09:19:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:date:from:to:cc:subject:message-id:mail-followup-to :references:mime-version:content-type:content-disposition :in-reply-to:user-agent; bh=sdANKLyVaw0t/FmZ3uB6PYmjvUgC8nm3WSID0tGaYvo=; b=CdcSC1MMVOwIUq42Kz58v3oVbE1Ow+JmjzGAA18jc3Oa9U08sAboG0PunhkKFDMWrv umsL7mPYjho0nEeowKYpXAcpKGMhYAC+FlguigkZd+pH8VBsB3VfJ8OGQaIKIP54pr4w 5UgSd9M5IrSN+UzhNc/ueMMD9rKhGKFk1DSSbAZe4BeI1a00yVU+a2Jcg1gDkPbCUVj/ CXZLiapaUdLwZQAkNr0f5UHti1wsqVnmRdzoEpyikVJlmuynjVor4vi/Q8E2qzweFGas WJFCQ503L0tK/LEVYLPrsBfA7OOCP2jEJo+V+eicAPnMZQ9+JqOnYbewSyIcijQIgNB0 nEMw== X-Received: by 10.70.126.135 with SMTP id my7mr26743724pdb.135.1423588768798; Tue, 10 Feb 2015 09:19:28 -0800 (PST) Received: from localhost (c-76-21-76-83.hsd1.ca.comcast.net. [76.21.76.83]) by mx.google.com with ESMTPSA id se7sm19862210pbc.84.2015.02.10.09.19.27 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 10 Feb 2015 09:19:27 -0800 (PST) Sender: Gleb Kurtsou Date: Tue, 10 Feb 2015 09:20:39 -0800 From: Gleb Kurtsou To: Slawa Olhovchenkov Subject: Re: removing bdes.. Message-ID: <20150210172039.GA1071@reks> Mail-Followup-To: Slawa Olhovchenkov , John-Mark Gurney , arch@FreeBSD.org References: <20150209181502.GF1953@funkthat.com> <20150210151812.GB67127@zxy.spb.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20150210151812.GB67127@zxy.spb.ru> User-Agent: Mutt/1.5.23 (2014-03-12) Cc: arch@FreeBSD.org, John-Mark Gurney X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Feb 2015 17:19:29 -0000 On (10/02/2015 18:18), Slawa Olhovchenkov wrote: > On Mon, Feb 09, 2015 at 10:15:02AM -0800, John-Mark Gurney wrote: > > > So, I happen to stuble across bdes recently and think we should remove > > it.. > > > > I'm fine w/ making it a port so that people who need it can use it... > > > > Especially considering: > > The DES cipher should no longer be considered secure. Please consider > > using a more modern alternative. > > > > Though sadly, that comment was added almost 15 years after DES was > > brute forced by DEEPCrack. > > Clear text also insecure. Do you remove all clear text? This is rather odd argument ;) I'm all for removing it. openssl provides file encryption for those who need it in base.