Re: Cruyptokit package

[David Brown <caml-list@davidb.org>]

On Thu, May 15, 2003 at 06:47:19AM +0200, Sven Luther wrote:

> That is crap, if the package ever enter the archive, it will
> automatically be declared to the US authorities, and thus be legal to
> export. If anything, you could simply wait for the cryptokit to enter
> the archive, do an NMU with the patch applied, and then have Sylvain
> take the patch and send it upstream.

I haven't kept up with Debian legal to see if they are working to comply
with the US export regulations.  Yes, declaration is supposed to be
enough.

In any case, here is the patch, it involves deleting a character:

--- x/cryptokit-1.1/cryptokit.ml        Thu Aug 22 02:29:33 2002
+++ cryptokit-1.1/cryptokit.ml  Sun Nov 17 12:06:11 2002
@@ -512,7 +512,7 @@

     method put_substring src ofs len =
       if len <= 0 then () else
-      if used + len <= blocksize then begin
+      if used + len < blocksize then begin
         (* Just accumulate len characters in ibuf *)
         String.blit src ofs ibuf used len;
         used <- used + len

This causes the cipher to be run if an exact blocksize multiple of data
has been passed through it.  Otherwise, it isn't possible to implement
protocols that stream encrypted data.

Dave Brown