[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Crypto implementations (was: C source)



Do not CC me, I am subscribed to the list. This is clear in the CoC
for lists.debian.org, and it's prominently in the mail signature of
my mail you replied to.

On Fri, Jul 15, 2016 at 12:36:46PM +0200, Nicolas George wrote:
> L'octidi 28 messidor, an CCXXIV, Jonathan Dowland a écrit :
> > FWIW, last time I wanted to do md5 in C, I copied the code into my own
> > project. I got it from the source to dpkg, which did the same thing.
> 
> By doing that, you are depriving yourself of future bugfixes and
> improvements to that implementation. Well, MD5 is pretty much set in stone
> and can be completely tested, so it is not a serious concern, but I wanted
> to underline it for the record.

Can't miss an opportunity to go all Comic-Book-Guy on your audience!

There's obviously a trade-off between re-use a library and cargo-cult some code
when implementing something. MD5 is small and simple enough that it falls on
the former side of that line a lot of the time, especially if the alternative 
is including a heavy weight library dependency like OpenSSL. One's mileage may
vary depending on the nature of one's particular project.

If it was good enough for dpkg...


-- 
Jonathan Dowland
Please do not CC me, I am subscribed to the list.

Attachment: signature.asc
Description: Digital signature


Reply to: