From owner-freebsd-current Mon Dec 16 07:04:15 1996 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id HAA10913 for current-outgoing; Mon, 16 Dec 1996 07:04:15 -0800 (PST) Received: from pillar.elsevier.co.uk (root@pillar.elsevier.co.uk [193.131.222.35]) by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id HAA10874 for ; Mon, 16 Dec 1996 07:03:41 -0800 (PST) Received: from snowdon.elsevier.co.uk (snowdon.elsevier.co.uk [193.131.197.164]) by pillar.elsevier.co.uk (8.8.3/8.8.3) with ESMTP id PAA02134 for ; Mon, 16 Dec 1996 15:02:45 GMT Received: from cadair.elsevier.co.uk by snowdon.elsevier.co.uk with SMTP (PP); Mon, 16 Dec 1996 15:02:26 +0000 Received: from tees.elsevier.co.uk (tees.elsevier.co.uk [193.131.197.60]) by cadair.elsevier.co.uk (8.8.3/8.8.3) with ESMTP id PAA13112; Mon, 16 Dec 1996 15:02:18 GMT Received: (from dpr@localhost) by tees.elsevier.co.uk (8.8.3/8.8.3) id PAA00573; Mon, 16 Dec 1996 15:00:59 GMT To: Bill Paul Cc: terry@lambert.org (Terry Lambert), current@FreeBSD.ORG Subject: Re: Plan for integrating Secure RPC -- comments wanted References: <199612152351.SAA05656@skynet.ctr.columbia.edu> From: Paul Richards Date: 16 Dec 1996 15:00:58 +0000 In-Reply-To: Bill Paul's message of Sun, 15 Dec 1996 18:51:23 -0500 (EST) Message-ID: <57ohfubkk5.fsf@tees.elsevier.co.uk> Lines: 24 X-Mailer: Gnus v5.3/Emacs 19.30 Sender: owner-current@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Bill Paul writes: > No, that's an exportable DES crypt(3), which is not the same as > exportable DES. The MIT DES library can't be exported. (Although, I > discovered that my 4.4BSD-Lite CD from ORA at UNIX Expo a while back > includes the Kerberos IV source and the MIT DES library source. I > wonder if ORA has shipped any of those CDs overseas.) Luckily, I had a discussion with someone in the Perl group who was from ORA. He claimed FreeBSD was being overly restrictive in it's lack of DES code. He cited NetBSD and 4.4 claiming that both were exportable because the DES code was only being used for authentication and not encryption. I'm wondering if there may be some confusion at ORA due to the fact that 4.4 has a unidirectional DES based hashing function (which I was not aware of). I'm not sure that would be exportable anyway, isn't it still encryption technology even if it's not used as such. I suspect that the CD you have is exactly what is being exported since this person stated that was what they were in fact doing. -- Paul Richards. Originative Solutions Ltd. (Netcraft Ltd. contractor) Elsevier Science TIS online journal project. Email: p.richards@elsevier.co.uk Phone: 0370 462071 (Mobile), +44 (0)1865 843155