From mboxrd@z Thu Jan 1 00:00:00 1970 Received: (from majordomo@localhost) by pauillac.inria.fr (8.7.6/8.7.3) id GAA02568; Mon, 23 Sep 2002 06:42:07 +0200 (MET DST) X-Authentication-Warning: pauillac.inria.fr: majordomo set sender to owner-caml-list@pauillac.inria.fr using -f Received: (from weis@localhost) by pauillac.inria.fr (8.7.6/8.7.3) id GAA02566 for caml-list@pauillac.inria.fr; Mon, 23 Sep 2002 06:42:06 +0200 (MET DST) Received: from concorde.inria.fr (concorde.inria.fr [192.93.2.39]) by pauillac.inria.fr (8.7.6/8.7.3) with ESMTP id SAA24325 for ; Fri, 20 Sep 2002 18:14:20 +0200 (MET DST) Received: from parsmtp1.rd.francetelecom.com (parsmtp1.rd.francetelecom.com [194.167.105.13]) by concorde.inria.fr (8.11.1/8.11.1) with ESMTP id g8KGEK502389; Fri, 20 Sep 2002 18:14:20 +0200 (MET DST) Received: from localhost.localdomain (l-at6154.rd.francetelecom.fr [10.193.13.28]) by p-grive.rd.francetelecom.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id S4CPK0M1; Fri, 20 Sep 2002 18:14:28 +0200 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C260C0.CB43CA00" content-class: urn:content-classes:message X-MimeOLE: Produced By Microsoft Exchange V6.0.5762.3 Subject: Re: [Caml-list] OcamlSpread 0.0.1 released Date: Fri, 20 Sep 2002 18:14:04 +0200 Message-ID: <15755.18764.944202.516163@localhost.localdomain> Thread-Topic: [Caml-list] OcamlSpread 0.0.1 released Thread-Index: AcJgwMu9twXFusyFEdaOgwCAXzHsRg== From: "MONIN Jean-Francois FTRD/DTL/LAN" To: "Arnaud SAHUGUET" Cc: "Xavier Leroy" , "Yurii A. Rashkovskii" , "Ohad Rodeh" , Sender: owner-caml-list@pauillac.inria.fr Precedence: bulk This is a multi-part message in MIME format. ------_=_NextPart_001_01C260C0.CB43CA00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable On a first reading I tended to agree with some of your arguments. However: > When choosing a crypto package, there are a few points to consider: > [...] > - the maintenance of the package > Flaws are being discovered everyday. It is better to use a crypto package > which is widely used, tested and maintained. > [...] > I think the last and worst thing to do is to re-implement some crypto from > scratch. But what do you think of: "When choosing an operating system, there are a few points to consider: [...] - the maintenance of the OS Flaws are being discovered everyday. It is better to use an OS which is widely used, tested and maintained. [...] I think the last and worst thing to do is to re-implement some OS from scratch." More seriously, perhaps, a well-known source of flaws is complexity. Expressing algorithms in Ocaml is often (much) less complex than=20 in C... I cannot be more specific in this case, because I did not examine the implementations. However, as you say yourself: > When choosing a crypto package, there are a few points to consider: >=20 > - the people who implement the package Regards, Jean-Francois ------_=_NextPart_001_01C260C0.CB43CA00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Re: [Caml-list] OcamlSpread 0.0.1 released

On a first reading I tended to agree with some
of your arguments. However:

> When choosing a crypto package, there are a few = points to consider:
> [...]
> - the maintenance of the package
> Flaws are being discovered everyday. It is = better to use a crypto package
> which is widely used, tested and = maintained.
> [...]
> I think the last and worst thing to do is to = re-implement some crypto from
> scratch.

But what do you think of:

"When choosing an operating system, there are a = few points to consider:
[...]
- the maintenance of the OS
Flaws are being discovered everyday. It is better to = use an OS
which is widely used, tested and maintained.
[...]
I think the last and worst thing to do is to = re-implement some OS from
scratch."

More seriously, perhaps, a well-known source of flaws = is complexity.
Expressing algorithms in Ocaml is often (much) less = complex than
in C...

I cannot be more specific in this case, because I did = not examine
the implementations. However, as you say = yourself:

> When choosing a crypto package, there are a few = points to consider:
>
> - the people who implement the package

Regards,
  Jean-Francois

------_=_NextPart_001_01C260C0.CB43CA00-- ------------------- To unsubscribe, mail caml-list-request@inria.fr Archives: http://caml.inria.fr Bug reports: http://caml.inria.fr/bin/caml-bugs FAQ: http://caml.inria.fr/FAQ/ Beginner's list: http://groups.yahoo.com/group/ocaml_beginners