NetBSD IANZAG 2.0G NetBSD 2.0G (IANZAG) #0: Tue Jul 13 22:38:35 NOVST 2004  
toor@IANZAG:/home/ianzag/NetBSD/current/build/obj/i386/sys/arch/i386/compile/IANZAG 
i386

---cut---
.if (${MKCRYPTO} != "no")
CPPFLAGS+=-DDES
.endif

SRCS=   buf.c cbc.c glbl.c io.c main.c re.c sub.c undo.c

LDADD+= -lcrypt
DPADD+= ${LIBCRYPT}
---cut---

So ed takes care about MKCRYPTO flag in sources code list. On the other hand 
it always linked with -lcrypt. Maybe it worths to guard LDADD with MKCRYPTO 
flag too ? Like:

---cut---
.if (${MKCRYPTO} != "no")
CPPFLAGS+=-DDES
.endif

SRCS=   buf.c cbc.c glbl.c io.c main.c re.c sub.c undo.c

.if (${MKCRYPTO} != "no")
LDADD+= -lcrypt
DPADD+= ${LIBCRYPT}
.endif
---cut---

// wbr