Re: r5776 enables RC5 and MDC2 in OpenSSL, Why?

Nathan Kidd wrote:

> I'm curious about r5776:
> "enable the rc5 and mdc2 cipher in the OpenSSL build."
> http://tortoisesvn.tigris.org/source/browse/tortoisesvn/trunk/ext/build/OpenSSL.build
>
>
> According to http://www.openssl.org/support/faq.html#BUILD8, in the US,
> at least, the RC5 and MDC2 patents still have not expired. In all
> OpenSSL builds we do (in Canada) we still disable these ciphers (and
> IDEA). Was there some legal status change you're aware of?

We had these two enabled for 1.2.x releases too. I disabled them for the
1.3.x releases because I though no one would use them. But apparently,
some people still do need those.
(and nobody complained about patents back then).

I don't know about those patents. But as far as I'm concerned, those
ciphers are only used if the server requires them. So if they're
patented in your country, just configure the server to not use them.

And you maybe don't want to know my opinion about patents... :)

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org