From owner-freebsd-questions@FreeBSD.ORG Wed Dec 15 14:46:04 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 703CB106567A for ; Wed, 15 Dec 2010 14:46:04 +0000 (UTC) (envelope-from fullblaststorm@gmail.com) Received: from mail-yw0-f54.google.com (mail-yw0-f54.google.com [209.85.213.54]) by mx1.freebsd.org (Postfix) with ESMTP id 2EADB8FC0A for ; Wed, 15 Dec 2010 14:46:03 +0000 (UTC) Received: by ywp6 with SMTP id 6so1089913ywp.13 for ; Wed, 15 Dec 2010 06:46:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=JTEYHCGYTxmcPuh/lgD3JketPmZJwzOf+vfYjFu0yic=; b=vI6wUjoIONPrauXUdo8GVNCjqmihExB9rKiqBAHwQ72zFboO+hgwtbLiYNk+ea/u/4 T/NPnbKnfblOSXhV/dUDpdz7Ar62iDs8eptVazlXia+xeTk/duWF5EneTt0AMIDcbA0b Lwv5qiYMYtMzBrahdZuYTmSHkohg17eQFwzuE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=wkHYYMIqd2yCNkCvTM/vgzgsItebrzL9VggyEUmNRou9lOLwf5QZceXNKcOJtq2hxI cfzdLTXeVqLe9PhQSHKKnUBTlp21J905c8hohdF6lMZh/mBFQg63+2zS2itKHARK5LFG 7wU2iSOnMbuXUqUnVvkObjGeghs8m7lVz1ZR8= MIME-Version: 1.0 Received: by 10.151.7.14 with SMTP id k14mr9874475ybi.365.1292423003214; Wed, 15 Dec 2010 06:23:23 -0800 (PST) Received: by 10.220.195.72 with HTTP; Wed, 15 Dec 2010 06:23:23 -0800 (PST) Date: Wed, 15 Dec 2010 20:23:23 +0600 Message-ID: From: Victor Lyapunov To: FreeBSD Mailing List Content-Type: text/plain; charset=ISO-8859-1 Subject: FreeBSD IPSec stack contains backdoors? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Dec 2010 14:46:04 -0000 Hi folks, Recently OpenBSD developer Gregory Perry disclosed information about possible backdoors in OpenBSD IPSec stack (see http://permalink.gmane.org/gmane.os.openbsd.tech/22557) In particular, Gregory Perry, who has been working on a OpenBSD -ish implementation of IPSec says a number of backdoors have been introduced into the code. As far as I am aware, FreeBSD contains considerable amount of code ported from OpenBSD. The question is: was the FreeBSD's ipsec code ported from OpenBSD's implementation? If so, what might be the impact of this? Thanks, Victor Lyapunov.