NOCRYPT / NOSECURE

[Mark Murray]

Dag-Erling Smorgrav writes:
> Mark Murray <mark at grondar.org> writes:
> > If openssl's des(1) is the same as our bdes(1) (ie, gives the same results)
> > then I'm in support of this.
> 
> I haven't compared OpenSSL'S des(1) directly with bdes(1), but they
> are both ports (or reimplementations) of Sun's des(1), and I've used
> OpenSSL's des(1) in the past to exchange data with Solaris users who
> were using Sun's des(1).

I've converted our bdes(1) to use the openSSL library. I've also done
ed(1). :-). libcipher is now OBE.

> >                              I'd also approve of a wrapper script that
> > calls openssl(1) or des(1) and make a compatible bdes(1).
> 
> That's possible of course, but bdes(1) has a lot of command-line
> options which we'd need to implement.  Probably not worth the trouble.

No problem. See above :-).

> >                                                           Similar scripts
> > may be a good idea for md5(1) and sha1(1).
> 
> 'ln -s /usr/bin/openssl /usr/bin/md5' is almost right for md5(1),
> except for some parentheses in the output IIRC.  ISTR the same goes
> for sha1(1).

A one-liner shell script does it :-).

M
--
Mark Murray
iumop ap!sdn w,I idlaH