Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> writes:
> From: Lewis McCarthy <[EMAIL PROTECTED]>
> lewis.mccarthy> It sounds like you're talking about using MD4 as part
> lewis.mccarthy> of something else, not as part of SSL or TLS. I see
> lewis.mccarthy> OpenSSL as an SSL/TLS library, not as a generic crypto
> lewis.mccarthy> library or a general purpose library.
>
> Assar, care to comment on that?
Basically, what Richard already said. OpenSSL is being used as a
generic crypto library, look at /usr/lib/libcrypto* in your favorite
BSD for the simplest example, and look also at other programs that
rely on it. I have people asking me why we're shipping a libdes and
not being able to link against an existing libcrypto from openssl.
And the functionality that was missing in this case was md4, which it
was fairly simple to add. Considering how much other stuff there's
OpenSSL I don't really see a problem with having md4, for not other
reason, `completeness'.
/assar
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]