>The point is that _the French law_ says: "Thou shalt not use a keylength >greater than 128 bits". There's no room for interpretation, here. Even if >I invented my own cipher, no matter how rotten it might be (why not use >XOR ? ;-)))))) ), I simply wouldn't be allowed to use a 129 bit key ! It's >NOT debatable. Full stop. :-( But then, can't you just compile everything as normal, and change the allowed ciphersuites in the configuration..? It surely can't be illegal to compile the 3DES in, but simply not use it. abe -- Anssi Bragge, Associate Director UBS AG, Interchange Systems http://www.ubs.com/ Bahnhofstr. 45 / CH-8098 Zürich, Switzerland Tel: +41-1-236 04 85 / Fax: +41-1-236 41 41 / GSM: +41-76-388 77 22 ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]