Subject: Re: what to put into cryptosrc-intl tree
To: None <tech-security@netbsd.org>
From: Michael C. Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-security
Date: 06/23/1999 13:32:52
>>>>> "Perry" == Perry E Metzger <perry@piermont.com> writes:
    Perry> "Michael C. Richardson" <mcr@sandelman.ottawa.on.ca> writes:
    >> 2. we import KAME IPsec. It appears that there is movement towards
    >> using KAME as a route toward unified ipv6, and there is desire to do
    >> this for 1.5.

    Perry> I suggest you let Itojun do the work on this. He's already outside
    Perry> the U.S.

  I do intend to do that :-)
  "We" includes Itojun.

    Perry> The only parts that need to be put into cryptosrc-intl will be the
    Perry> ESP stuff, since the rest is exportable.

    >> 4. kerberos IV (eBones)

    Perry> I oppose this. No new code using DES. DES is not good enough for
    Perry> our source tree.

  Okay, noted. Isn't there a way to use 3DES with IV?

   :!mcr!:            |  Cow#1: Are you worried about getting Mad Cow Disease?
   Michael Richardson |  Cow#2: No. I'm a duck.
 Home: mcr@sandelman.ottawa.on.ca. PGP key available.