Re: Crypto consolidation in debian ?
Roger Leigh <rleigh@codelibre.net> wrote:
> On Sun, May 01, 2011 at 02:29:39PM +0200, Andreas Metzler wrote:
[...]
>> Also libgcrypt does not seem to be designed to be used indirectly (via
>> gnutls) without knowing and caring about it. (Threading, secmem).
>> Which is why about 50% of all gnutls-using packages are using
>> gcry_control.
> This is the root cause, I think. libgcrypt was developed as part of
> gnutls, and although it's a separate library, it's insufficiently
> generalised. It's implicitly doing things the way gnutls wanted them
> doing,
[...]
I am not sure, but afaik the primary target for libgcrypt was
gnupg(2). gnutls happened later. libgcrypt is not developed as part of
gnutls, there are different upstream authors.
cu andreas
Reply to: