On 2011-02-20 Simon Josefsson <si...@josefsson.org> wrote: > The Blowfish code in Nettle has already been re-implemented under > LGPLv2+ but not released yet. I am working on re-implementing Serpent > under LGPLv2+, however there are multiple and incompatible test vectors > of Serpent and it is not clear which corresponds to the "real" Serpent.
> Meanwhile, perhaps the Nettle package in Debian could disable Serpent > and Blowfish, or since the Blowfish re-write mostly re-established > LGPLv2+ as the license of the old code, at least disable Serpent? [...] Hello, That would break the ABI and require a soname change, afaiui. I have the feeling that the discussion I started is an academic one anyway. Nettle's public key library (libhogweed) uses and links against libgmp, which is LGPLv3+. Therefore switching gnutls from gcrypt to nettle would break GPLv2-compatibility (GPLv2 without the "or any later version " clause). Oh dear. cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' -- To UNSUBSCRIBE, email to debian-legal-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110220102337.gc2...@downhill.g.la
