From owner-freebsd-hackers  Fri Apr 21 13:08:06 1995
Return-Path: hackers-owner
Received: (from majordom@localhost)
          by freefall.cdrom.com (8.6.10/8.6.6) id NAA17422
          for hackers-outgoing; Fri, 21 Apr 1995 13:08:06 -0700
Received: from pluto.ops.NeoSoft.com (root@pluto.ops.NeoSoft.COM [198.64.212.23])
          by freefall.cdrom.com (8.6.10/8.6.6) with ESMTP id NAA17415
          for <hackers@FreeBSD.org>; Fri, 21 Apr 1995 13:08:00 -0700
Received: from metal.ops.neosoft.com (root@glenn-slip52.nmt.edu [129.138.5.152]) by pluto.ops.NeoSoft.com (8.6.10/8.6.10) with ESMTP id PAA16624; Fri, 21 Apr 1995 15:07:18 -0500
Received: (from smace@localhost) by metal.ops.neosoft.com (8.6.11/8.6.10) id OAA02872; Fri, 21 Apr 1995 14:07:09 -0600
From: Scott Mace <smace@metal-mail.neosoft.com>
Message-Id: <199504212007.OAA02872@metal.ops.neosoft.com>
Subject: Re: crypt folks?
To: jkh@violet.berkeley.edu (Jordan K. Hubbard)
Date: Fri, 21 Apr 1995 14:07:08 -0600 (MDT)
Cc: hackers@FreeBSD.org
In-Reply-To: <199504211049.DAA08127@violet.berkeley.edu> from "Jordan K. Hubbard" at Apr 21, 95 03:49:35 am
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text
Content-Length: 2004      
Sender: hackers-owner@FreeBSD.org
Precedence: bulk

I'm not really sure how effective a encrypted telnet would be without
kerberos...  The key to the encrpytion would have to be passed in plaintext
which kinda defeats the purpose...


> Path: agate!overload.lbl.gov!lll-winken.llnl.gov!uwm.edu!vixen.cso.uiuc.edu!howland.reston.ans.net!news.sprintlink.net!matlock.mindspring.com!rsanders
> From: rsanders@interbev.mindspring.com (Robert Sanders)
> Newsgroups: comp.unix.bsd.freebsd.misc
> Subject: Secure (encrypted) telnet
> Date: 20 Apr 1995 13:36:41 GMT
> Organization: MindSpring Enterprises, Inc.
> Lines: 26
> Message-ID: <3n5o19$h32@nntp4.mindspring.com>
> NNTP-Posting-Host: interbev.mindspring.com
> 
> We're about to install a FreeBSD machine for network monitoring, so keep
> in mind that although I am not yet a FreeBSD user, it's only a matter of
> days.
> 
> I've been trying to get FreeBSD's telnet (telnet, libtelnet, telnetd) to
> compile with encryption and authentication enabled.  I'd like to avoid
> Kerberos if possible, so I enabled RSA and DES with the appropriate
> defines.  The trouble is that, when compiling libtelnet, the rsaencpwd.c
> file used an include file that wasn't included in the source (cdc.h).
> After disabling RSA encryption, libtelnet could compile but linking
> telnet resulted in these errors:
> 
> enc_des.o: Undefined symbol _des_new_random_key referenced from text segment
> enc_des.o: Undefined symbol _des_ecb_encrypt referenced from text segment
> enc_des.o: Undefined symbol _des_set_random_generator_seed referenced from text segment
> enc_des.o: Undefined symbol _des_key_sched referenced from text segment
> 
> Can anyone tell me whether FreeBSD's telnet works in encrypted mode,
> and what pieces I have to grap for other operating systems if I wish
> to use it?  Obviously usr.bin/telnet, lib/libtelnet, and libexec/telnetd.
> Where can I find the missing pieces for the RSA and DES components?
> 
> I'm compiling this for Linux, AIX, BSDI, and (soon) FreeBSD.
> 
> Many thanks,
>   -- Robert
>