Date: Mon, 27 Jul 2015 23:18:40 -0500 From: Jim Thompson <jim@netgate.com> To: John-Mark Gurney <jmg@funkthat.com> Cc: "freebsd-security@FreeBSD.org" <freebsd-security@freebsd.org>, "freebsd-net@FreeBSD.org" <freebsd-net@freebsd.org> Subject: Re: remove IPsec SKIPJACK support... Message-ID: <5E419103-3111-4ADC-A49F-B703BBBC9C5F@netgate.com> In-Reply-To: <20150728034157.GO78154@funkthat.com> References: <20150728005730.GL78154@funkthat.com> <1DB60250-D362-4115-92F6-E27B7A5897C3@netgate.com> <20150728034157.GO78154@funkthat.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> On Jul 27, 2015, at 10:41 PM, John-Mark Gurney <jmg@funkthat.com> = wrote: >=20 > Jim Thompson wrote this message on Mon, Jul 27, 2015 at 20:24 -0500: >>> On Jul 27, 2015, at 7:57 PM, John-Mark Gurney <jmg@funkthat.com> = wrote: >>>=20 >>> I would like to remove it from HEAD immediately as I don't see a use >>> for it. Some time ago I proposed removing Skipjack from the OCF in = 12, but personally, now that I think about how long 12 is, we deprecate = these sooner rather than later. >>=20 >> Are we also going to comply with RFC 7321? >>=20 >> https://tools.ietf.org/html/rfc7321 >=20 > Looks like the only thing we need to change to comply w/ RFC7321 is > to remove DES support (note to those that don't read closely, DES, > not 3DES aka triple-DES), and I am fine removing DES support sooner > rather than later... The RFC 7321 requires it. I=E2=80=99m willing to do the work, but I = don=E2=80=99t want it to bikeshed. Jim
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5E419103-3111-4ADC-A49F-B703BBBC9C5F>