On 02/06/17 10:18 AM, Ed Schouten wrote: > Hi Allan, > > 2017-02-06 9:27 GMT+01:00 Allan Jude <allanj...@freebsd.org>: >> The use of DES for anything is discouraged, especially with a static IV of >> 0 > > Not entirely related to this, but still... > > Do we want to go ahead and also remove DES support from crypt(3)? > Compared to the other crypt formats, the DES implementation seems > fairly large, uses global state, etc. > > I can send out a change for code review if people {like,don't object to} this. >
I remember in the 4.x days, there was a documented reason why you might need to keep des crypt(3) instead of using md5crypt, but I would hope that went away a long time ago. I am in favour of this, but I don't know what all of the implications might be. We should likely ask someone on secteam@ about this. -- Allan Jude _______________________________________________ svn-src-head@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-head To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"