Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Jun 95 12:48:48 MDT
From:      terry@cs.weber.edu (Terry Lambert)
To:        mark@grondar.za (Mark Murray)
Cc:        current@freebsd.org
Subject:   Re: DES, crypt and eBones
Message-ID:  <9506161848.AA12539@cs.weber.edu>
In-Reply-To: <199506161708.TAA13736@grumble.grondar.za> from "Mark Murray" at Jun 16, 95 07:07:59 pm

next in thread | previous in thread | raw e-mail | index | archive | help
> I am getting a bit desparate now. I would _really_ like to start cleaning
> up the crypto code, and have made some specific proposals about haw I would
> like to do it, and asked for a mentor/buddy/tester to check it out before
> I commit. Is there no-one out there who is interested in this?

I don't have the test equipment, sorry.  But I do have some comments.  I
have forwarded the whole message to a friend who dies have the equipment
and may have an interest.

> 1) The crypto code is a mess. I fail to see why it is broken into `secure'
>    and `ebones', so I would like to merge these. (With eBones remaining a
>    separate distribution). I would like the distributions to be called
>    `crypto' and `krb'.

I believe the eBones split is intentional to allow drop in plugging of
crypto code to support the fact that many countries have export restrictions
(hence your crypts stuff distribution in the first place).  Am I wrong,
or is this a sanitized exportable framework?

The secure stuff is broken out so that people can get a cdrom or other
binary distribution from the US and the crypt from elsewhere.

Maybe you need to restate what it is you are attempting to do to meet
the plug-in crypto goal?  At the very least, this should clear up the
confused perception of exactly what it is you are asking for (my
current reaction is "I don't have one of those to give him because
I don't know what one of those is").  I mean for all I know, you are
only talking about a real code cleanup that has absolutely nothing to
do with API severance points for export/import.

> 2) I would like to update our DES library with some code I have from Eric
>    Young, including a secure (encrypting) telnet. He is the original author
>    of our DES library, and he converted Bones to eBones (Encrypting Bones).

Good deal.

> 3) I want to fix some nasty NIS/Kerberos incosistencies.

Good deal.

> 4) I want to complete the RPC work.

Wonderful deal.

> 5) etc...


					Terry Lambert
					terry@cs.weber.edu
---
Any opinions in this posting are my own and not those of my present
or previous employers.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9506161848.AA12539>