NOCRYPT / NOSECURE

[Dag-Erling Smorgrav]

Mark Murray <mark at grondar.org> writes:
> If openssl's des(1) is the same as our bdes(1) (ie, gives the same results)
> then I'm in support of this.

I haven't compared OpenSSL'S des(1) directly with bdes(1), but they
are both ports (or reimplementations) of Sun's des(1), and I've used
OpenSSL's des(1) in the past to exchange data with Solaris users who
were using Sun's des(1).

>                              I'd also approve of a wrapper script that
> calls openssl(1) or des(1) and make a compatible bdes(1).

That's possible of course, but bdes(1) has a lot of command-line
options which we'd need to implement.  Probably not worth the trouble.

>                                                           Similar scripts
> may be a good idea for md5(1) and sha1(1).

'ln -s /usr/bin/openssl /usr/bin/md5' is almost right for md5(1),
except for some parentheses in the output IIRC.  ISTR the same goes
for sha1(1).

DES
-- 
Dag-Erling Smorgrav - des at ofug.org