From owner-freebsd-arch@FreeBSD.ORG Fri Nov 21 02:22:24 2003 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DC8F216A4CE for ; Fri, 21 Nov 2003 02:22:24 -0800 (PST) Received: from critter.freebsd.dk (critter.freebsd.dk [212.242.86.163]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3E8E043FB1 for ; Fri, 21 Nov 2003 02:22:21 -0800 (PST) (envelope-from phk@phk.freebsd.dk) Received: from critter.freebsd.dk (localhost [127.0.0.1]) by critter.freebsd.dk (8.12.10/8.12.10) with ESMTP id hALALsmV004096; Fri, 21 Nov 2003 11:22:00 +0100 (CET) (envelope-from phk@phk.freebsd.dk) To: Clement Laforet From: "Poul-Henning Kamp" In-Reply-To: Your message of "Thu, 20 Nov 2003 00:49:10 +0100." <20031120004910.47a9d96d.sheepkiller@cultdeadsheep.org> Date: Fri, 21 Nov 2003 11:21:54 +0100 Message-ID: <4095.1069410114@critter.freebsd.dk> cc: freebsd-arch@FreeBSD.ORG cc: sgk@troutmask.apl.washington.edu cc: sam@errno.com cc: wkb@freebie.xs4all.nl Subject: Re: adding crypto support to GENERIC X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Nov 2003 10:22:25 -0000 In message <20031120004910.47a9d96d.sheepkiller@cultdeadsheep.org>, Clement Laf oret writes: >On Wed, 19 Nov 2003 19:52:18 +0100 >Eric Masson wrote: > >> >>>>> "Wilko" == Wilko Bulte writes: >> >> >> Are there any of those left ? >> Wilko> France ? >> >> Use of cryptographic devices seems to spread quickly these days in >> France, Laws have been seriously softened in this area, but I don't >> know for sure actual status. > >If my memory serves me right, you can't use a key stronger than 128 bits >except for software and uses authorized by the DCSSI. OpenSSL and GnuPG are >authorized (thanks to France FSF): Hang on here. We are not _forcing_ people to use the code, we are merely shipping it. I think we can conclude that no relevant country at this time restricts _possesion_ of crypto code, and that there is no problem in shipping it in GENERIC. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence.