Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 1 Nov 1999 18:08:57 -0800 (PST)
From:      Kris Kennaway <kris@hub.freebsd.org>
To:        Issei Suzuki <issei@issei.org>
Cc:        security@freebsd.org, ports@freebsd.org
Subject:   Re: OpenSSH patches
Message-ID:  <Pine.BSF.4.10.9911011804230.78061-100000@hub.freebsd.org>
In-Reply-To: <19991102065758V.issei@issei.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 2 Nov 1999, Issei Suzuki wrote:

> > I also haven't tested whether this actually WORKS, because my machine isn't
> > on the 'net right now. It builds fine, though - I'd be interested to hear
> > from people about how it works (it's supposedly interoperable with the "true"
> > SSH 1.x client/servers).
> 
>   It works fine on my FreeBSD 3.3-RELEASE box, though I have not
> tested on other OS evniroment.

Great to hear!

> > If it wasn't for the US crypto restrictions we all know and love,
> > I'd put the tarball up on my website.
> 
>   It does not seem that OpenSSH source code includes any kind of
> crypto argorythm (they are included in OpenSSL library), but is it
> still affected by US crypto restrictions?

There is some confusion (at least to me) about whether software which
provides a cryptographic function (like SSH) but which links to an
external library to provide the actual cryptographic code is liable under
the export restrictions.

Otherwise, everyone in the US could just write their cryptographic code to
a certain API and have it fulfilled by an internationally-developed crypto
library, thereby defeating the intent of the restrictions. I'd very much
like this to be true, but I didn't want to risk it being false, seeing as
how I'm a guest in ths country and as such very much subject to the whims
of the INS :-)

Kris

----
Cthulhu for President! For when you're tired of choosing the _lesser_ of
two evils..



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9911011804230.78061-100000>