From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/3308
Path: news.gmane.org!not-for-mail
From: Rich Felker <dalias@aerifal.cx>
Newsgroups: gmane.linux.lib.musl.general
Subject: Re: High-priority library replacements?
Date: Thu, 9 May 2013 10:45:28 -0400
Message-ID: <20130509144528.GK20323@brightrain.aerifal.cx>
References: <20130430021014.GC20323@brightrain.aerifal.cx>
 <CAOPXC2n3Q0Q5LKA9SG-Fz6gzj+_0HLjAetvXq-Sf80B5xh05eg@mail.gmail.com>
 <20130430083516.GK12689@port70.net>
 <CAOPXC2mdk397cWFkqAz4bJNo4_+fWBv-VupWCHJTLGuFawcFDw@mail.gmail.com>
 <CAOPXC2kZgOiCDiczx5e61ewQAV9PYXvCBrpuHUFs_S11DR08Bw@mail.gmail.com>
 <CAPLrYESUcvCM+H+b9VrmF6A+LyQHZdU349JfpSNv=GAb22vT8A@mail.gmail.com>
 <20130508230022.GA14297@Caracal>
 <CAPLrYERWt3wjXtB92NUA6skQ2Q8jneMYzHEp3U_N_TUoBS8a1g@mail.gmail.com>
 <20130509140852.GJ20323@brightrain.aerifal.cx>
 <CAPLrYEQMRL47xVg3HZVC8Hj=8N9nbuYKup3dXAo_Ce0QUoANXg@mail.gmail.com>
Reply-To: musl@lists.openwall.com
NNTP-Posting-Host: plane.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Trace: ger.gmane.org 1368110740 25468 80.91.229.3 (9 May 2013 14:45:40 GMT)
X-Complaints-To: usenet@ger.gmane.org
NNTP-Posting-Date: Thu, 9 May 2013 14:45:40 +0000 (UTC)
To: musl@lists.openwall.com
Original-X-From: musl-return-3312-gllmg-musl=m.gmane.org@lists.openwall.com Thu May 09 16:45:41 2013
Return-path: <musl-return-3312-gllmg-musl=m.gmane.org@lists.openwall.com>
Envelope-to: gllmg-musl@plane.gmane.org
Original-Received: from mother.openwall.net ([195.42.179.200])
	by plane.gmane.org with smtp (Exim 4.69)
	(envelope-from <musl-return-3312-gllmg-musl=m.gmane.org@lists.openwall.com>)
	id 1UaS6H-0004Ec-6W
	for gllmg-musl@plane.gmane.org; Thu, 09 May 2013 16:45:41 +0200
Original-Received: (qmail 3391 invoked by uid 550); 9 May 2013 14:45:40 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
Original-Received: (qmail 3383 invoked from network); 9 May 2013 14:45:40 -0000
Content-Disposition: inline
In-Reply-To: <CAPLrYEQMRL47xVg3HZVC8Hj=8N9nbuYKup3dXAo_Ce0QUoANXg@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Xref: news.gmane.org gmane.linux.lib.musl.general:3308
Archived-At: <http://permalink.gmane.org/gmane.linux.lib.musl.general/3308>

On Thu, May 09, 2013 at 04:40:03PM +0200, Daniel Cegiełka wrote:
> btw. OpenSSL.org published a small version of openssl-fips. It
> contains only FIPS 140-2 validated code.
> 
> http://www.openssl.org/source/
> http://www.openssl.org/docs/fips/fipsnotes.html
> 
> OpeSSL-fips vs CyaSSL (musl)
> 
> # ls -lh /var/tmp/ports/cyassl/image/usr/lib/
> -rw-r--r--    1 root     root       866.9k May  9 09:13 libcyassl.a
> -rwxr-xr-x    1 root     root       659.6k May  9 09:13 libcyassl.so.5.0.0
> 
> # ls -lh /usr/local/ssl/fips-2.0/lib/
> -r--r--r--    1 root     root       685.7k May  9 12:34 fipscanister.o

Wow, putting the whole thing in a single .o file. That's classy. 685k
even for programs that just need a few functions from it.

Rich