From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/56293 Path: main.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general Subject: Re: Crypto problems again Date: Thu, 05 Feb 2004 21:53:18 +0100 Sender: ding-owner@lists.math.uh.edu Message-ID: References: NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1076014471 26114 80.91.224.253 (5 Feb 2004 20:54:31 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Thu, 5 Feb 2004 20:54:31 +0000 (UTC) Original-X-From: ding-owner+M4833@lists.math.uh.edu Thu Feb 05 21:54:21 2004 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1AoqVx-0001Ox-00 for ; Thu, 05 Feb 2004 21:54:21 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1AoqVd-0007sQ-00; Thu, 05 Feb 2004 14:54:01 -0600 Original-Received: from justine.libertine.org ([66.139.78.221]) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1AoqVV-0007sK-00 for ding@lists.math.uh.edu; Thu, 05 Feb 2004 14:53:53 -0600 Original-Received: from yxa.extundo.com (178.230.13.217.in-addr.dgcsystems.net [217.13.230.178]) by justine.libertine.org (Postfix) with ESMTP id B802D3A004A for ; Thu, 5 Feb 2004 14:53:21 -0600 (CST) Original-Received: from latte.josefsson.org (yxa.extundo.com [217.13.230.178]) (authenticated bits=0) by yxa.extundo.com (8.12.10/8.12.10) with ESMTP id i15KrKMe014729 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO) for ; Thu, 5 Feb 2004 21:53:20 +0100 Original-To: ding@gnus.org Mail-Copies-To: nobody X-Hashcash: 0:040205:ding@gnus.org:87d8616fb5c8c182 In-Reply-To: (Lars Magne Ingebrigtsen's message of "Thu, 05 Feb 2004 18:25:03 +0100") User-Agent: Gnus/5.110002 (No Gnus v0.2) Emacs/21.3.50 (gnu/linux) Precedence: bulk Xref: main.gmane.org gmane.emacs.gnus.general:56293 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:56293 Lars Magne Ingebrigtsen writes: > Lars Magne Ingebrigtsen writes: > >> Simon Josefsson writes: >> >>> What's the definition of crypto code? For example, does an elisp >>> wrapper around GnuTLS count? A wrapper around GnuPG? Emacs contains >>> a MD5 implementation in C, is it "crypto"? Or MD4, SHA-1? Are >>> authentication mechanisms based on hashing, like CRAM-MD5, "crypto"? >> >> Ok; I'll ask RMS... > > And here's the response from RMS: > > ---------- > > What's the definition of crypto code? > > I will explain how I understand the matter. However, why ask me when > you can learn from experts? There must be web sites that explain this > issue in detail. I don't know which sites, but you can find them more > easily than I can. Anyone? Preferably authoritative information from a governmental department or so. > For example, does an elisp > wrapper around GnuTLS count? > > Yes. This implies several modifications, for example to imap.el. I don't think I'll be able to look into this soonish. If someone else wants to look into this, I could probably find the time to review a proposed patch for any (non-intended) negative effects. > Are > authentication mechanisms based on hashing, like CRAM-MD5, "crypto"? > > Authentication does not count as encryption. So our new SASL library is not a problem, I think. OTOH, some mechanisms (NTLM?) might use encryption as part of the authentication. Does that count? Even if it is weak encryption? (56-bit DES.)