On Thu, May 15, 2003 at 09:20:16AM -0700, David Brown wrote: > On Thu, May 15, 2003 at 06:47:19AM +0200, Sven Luther wrote: > > > That is crap, if the package ever enter the archive, it will > > automatically be declared to the US authorities, and thus be legal to > > export. If anything, you could simply wait for the cryptokit to enter > > the archive, do an NMU with the patch applied, and then have Sylvain > > take the patch and send it upstream. > > I haven't kept up with Debian legal to see if they are working to comply > with the US export regulations. Yes, declaration is supposed to be > enough.
Yep, since woody release a month or so ago, crypto stuff could go into main. > In any case, here is the patch, it involves deleting a character: > > --- x/cryptokit-1.1/cryptokit.ml Thu Aug 22 02:29:33 2002 > +++ cryptokit-1.1/cryptokit.ml Sun Nov 17 12:06:11 2002 > @@ -512,7 +512,7 @@ > > method put_substring src ofs len = > if len <= 0 then () else > - if used + len <= blocksize then begin > + if used + len < blocksize then begin > (* Just accumulate len characters in ibuf *) > String.blit src ofs ibuf used len; > used <- used + len > > This causes the cipher to be run if an exact blocksize multiple of data > has been passed through it. Otherwise, it isn't possible to implement > protocols that stream encrypted data. And that could have caused problems with the US regulation thingy ? I can't believe this, this is not even proper crypto thing, just some string handling function bugfix. Friendly, Sven Luther

