Done to please the export controllers, methinks. From the 2nd edition ENCRYPT(2) man page:
BUGS
The source is not included in the public distributions. The implementation is broken in a way that makes it unsuitable for anything but authentication.
If this is the case, should this be switched now that export restrictions have eased?
Martin
Tim Newsham http://www.lava.net/~newsham/