From owner-freebsd-arch@FreeBSD.ORG Fri Dec 10 13:25:14 2004 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3201716A4CF; Fri, 10 Dec 2004 13:25:14 +0000 (GMT) Received: from storm.uk.FreeBSD.org (storm.uk.FreeBSD.org [194.242.157.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9C98F43D48; Fri, 10 Dec 2004 13:25:13 +0000 (GMT) (envelope-from mark@grondar.org) Received: from storm.uk.FreeBSD.org (uucp@localhost [127.0.0.1]) by storm.uk.FreeBSD.org (8.13.1/8.13.1) with ESMTP id iBADPBFh063661; Fri, 10 Dec 2004 13:25:11 GMT (envelope-from mark@grondar.org) Received: (from uucp@localhost)iBADPAN8063659; Fri, 10 Dec 2004 13:25:10 GMT (envelope-from mark@grondar.org) Received: from grondar.org (localhost [127.0.0.1]) by grovel.grondar.org (8.13.1/8.13.1) with ESMTP id iBADMDQD088479; Fri, 10 Dec 2004 13:22:13 GMT (envelope-from mark@grondar.org) Message-Id: <200412101322.iBADMDQD088479@grovel.grondar.org> To: "Devon H. O'Dell" From: Mark Murray In-Reply-To: Your message of "Fri, 10 Dec 2004 14:09:08 +0100." <41B99FF4.2070703@sitetronics.com> Date: Fri, 10 Dec 2004 13:22:13 +0000 Sender: mark@grondar.org cc: Mark Murray cc: Colin Percival cc: freebsd-arch@FreeBSD.ORG Subject: Re: Adding standalone RSA code X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Dec 2004 13:25:14 -0000 "Devon H. O'Dell" writes: > > 240k is not a big binary, and it sounds like your applet is one that > > may get heavy use. Its not built for speed; how much of a problem is > > this? If OpenSSL grows hardware BigNum support, your app will not > > benefit; how will this affect the user? Is size really a concern? I > > can't find a disk smaller than 10 GB at my local dealer. > > I use CompactFlash cards to run FreeBSD on some systems, and the > smallest is 16MB. This would be a very welcomed library for such a > system. A good few people are using solid-state disks for data storage > in FreeBSD these days, especially those of us doing work on embedded > systems. FreeBSD is really aiming itself at the server market. While I sympathise with what you are doing, what you are doing is somewhat specialised, and is the sort of thing that lends itself to purpose-built tools. I guess that you are really on the side of a "no crypto" variant of FreeBSD, but with a few hand-picked ports chosen for your application. My reluctance to unconditionally accept a custom RSA library is based on the experience of having other duplicated technologies in the system, which then diverge and become a real PITN to select and support. IPFW, IPFilter anf PF are a good example of this. Previously we had libcrypto AND libdes; it took AGES to clean up that mess. > When you have several binaries linking against OpenSSL, that 240k can > take up a lot of space, very quickly. In the case of sharable libraries, not very quickly, and not really in a way that is causing a problem for desktops and servers. > Hope I didn't sound callous; that's not my intention. No callousness detected :-) M -- Mark Murray iumop ap!sdn w,I idlaH