Re: Cruyptokit package

[Sven Luther <sven.luther@wanadoo.fr>]

On Thu, May 15, 2003 at 09:20:16AM -0700, David Brown wrote:
> On Thu, May 15, 2003 at 06:47:19AM +0200, Sven Luther wrote:
> 
> > That is crap, if the package ever enter the archive, it will
> > automatically be declared to the US authorities, and thus be legal to
> > export. If anything, you could simply wait for the cryptokit to enter
> > the archive, do an NMU with the patch applied, and then have Sylvain
> > take the patch and send it upstream.
> 
> I haven't kept up with Debian legal to see if they are working to comply
> with the US export regulations.  Yes, declaration is supposed to be
> enough.

Yep, since woody release a month or so ago, crypto stuff could go into
main.

> In any case, here is the patch, it involves deleting a character:
> 
> --- x/cryptokit-1.1/cryptokit.ml        Thu Aug 22 02:29:33 2002
> +++ cryptokit-1.1/cryptokit.ml  Sun Nov 17 12:06:11 2002
> @@ -512,7 +512,7 @@
> 
>      method put_substring src ofs len =
>        if len <= 0 then () else
> -      if used + len <= blocksize then begin
> +      if used + len < blocksize then begin
>          (* Just accumulate len characters in ibuf *)
>          String.blit src ofs ibuf used len;
>          used <- used + len
> 
> This causes the cipher to be run if an exact blocksize multiple of data
> has been passed through it.  Otherwise, it isn't possible to implement
> protocols that stream encrypted data.

And that could have caused problems with the US regulation thingy ? I
can't believe this, this is not even proper crypto thing, just some
string handling function bugfix.

Friendly,

Sven Luther