Re: Cruyptokit package
On Thu, May 15, 2003 at 09:20:16AM -0700, David Brown wrote:
> On Thu, May 15, 2003 at 06:47:19AM +0200, Sven Luther wrote:
>
> > That is crap, if the package ever enter the archive, it will
> > automatically be declared to the US authorities, and thus be legal to
> > export. If anything, you could simply wait for the cryptokit to enter
> > the archive, do an NMU with the patch applied, and then have Sylvain
> > take the patch and send it upstream.
>
> I haven't kept up with Debian legal to see if they are working to comply
> with the US export regulations. Yes, declaration is supposed to be
> enough.
Yep, since woody release a month or so ago, crypto stuff could go into
main.
> In any case, here is the patch, it involves deleting a character:
>
> --- x/cryptokit-1.1/cryptokit.ml Thu Aug 22 02:29:33 2002
> +++ cryptokit-1.1/cryptokit.ml Sun Nov 17 12:06:11 2002
> @@ -512,7 +512,7 @@
>
> method put_substring src ofs len =
> if len <= 0 then () else
> - if used + len <= blocksize then begin
> + if used + len < blocksize then begin
> (* Just accumulate len characters in ibuf *)
> String.blit src ofs ibuf used len;
> used <- used + len
>
> This causes the cipher to be run if an exact blocksize multiple of data
> has been passed through it. Otherwise, it isn't possible to implement
> protocols that stream encrypted data.
And that could have caused problems with the US regulation thingy ? I
can't believe this, this is not even proper crypto thing, just some
string handling function bugfix.
Friendly,
Sven Luther
Reply to: