Re: apg (was: Intent to Rewrite: pwgen)
On Fri, Jun 01, 2001 at 09:21:02PM +0200, Marc Haber wrote:
> >One note about apg is that since the sources use the CAST encryption
> >algorithm to do its random number generation (instead of relying on
> >/dev/random or some MD5 or SHA based scheme), apg would have to go
> >into non-US.
>
> I wasn't aware of that. Thanks for pointing that out to me, it will be
> fixed in the version that I actually upload.
>
> Do you think it would be a good idea to ask upstream to refrain from
> using CAST?
You can certainly ask. There's no reason to use CAST; it wouldn't be
hard to build one based on SHA, or just simply read from /dev/urandom.
- Ted
Reply to: