From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/3369
Path: news.gmane.org!not-for-mail
From: Gregor Pintar <grpintar@gmail.com>
Newsgroups: gmane.linux.lib.musl.general
Subject: Re: High-priority library replacements?
Date: Mon, 27 May 2013 17:53:23 +0200
Message-ID: <CAOPXC2nthi=Lr9fPsVpc3sN3e-EupytUYJPB3neOzfvHz_dC0g@mail.gmail.com>
References: <20130425041553.GA13951@brightrain.aerifal.cx>
	<CAOPXC2=iHvRetaLzvdOuRKdXe5D19_-G+2N5vf-dxxYy7M6eQg@mail.gmail.com>
	<CAPLrYER960BeuYE31f=ES=m25O6PPpDUrXzRCTAhhaTROQbakQ@mail.gmail.com>
Reply-To: musl@lists.openwall.com
NNTP-Posting-Host: plane.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Trace: ger.gmane.org 1369670017 4124 80.91.229.3 (27 May 2013 15:53:37 GMT)
X-Complaints-To: usenet@ger.gmane.org
NNTP-Posting-Date: Mon, 27 May 2013 15:53:37 +0000 (UTC)
To: musl@lists.openwall.com
Original-X-From: musl-return-3373-gllmg-musl=m.gmane.org@lists.openwall.com Mon May 27 17:53:38 2013
Return-path: <musl-return-3373-gllmg-musl=m.gmane.org@lists.openwall.com>
Envelope-to: gllmg-musl@plane.gmane.org
Original-Received: from mother.openwall.net ([195.42.179.200])
	by plane.gmane.org with smtp (Exim 4.69)
	(envelope-from <musl-return-3373-gllmg-musl=m.gmane.org@lists.openwall.com>)
	id 1Ugzjr-0001Vq-PG
	for gllmg-musl@plane.gmane.org; Mon, 27 May 2013 17:53:35 +0200
Original-Received: (qmail 21693 invoked by uid 550); 27 May 2013 15:53:35 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
Original-Received: (qmail 21685 invoked from network); 27 May 2013 15:53:34 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        bh=+Pzk/VOcryOaj6BEF4+uBYz35f/Tl63XHVr8NPnVKho=;
        b=BWDsxh6hEwiB2l84SE9TBYKL+PiTzL9P7ehsQY7EWUdkMd5YeJ7O/domPv8Xc9KwR9
         kxbQnlp0czlbL3HdWQKx8Y87qLwZWzStbZmiTjufbsT2v4f8WEhhvXZyIUyXFhV4cE0E
         SI8ntqyFLsBJ2FM3r+D3Or6rIGlzPxpi5eI7iry+uV/+usnts9kKNOWlGKuKpIfmz75H
         SA2TgAUW+9uhWYlsH9I3slvnxYQ18orX9nABT1Bekklo99pvxjv3Nrj/Qrbc89W2qe/H
         glez4bBGDCvzd0wGkux57DcpELPHBpjdl8gec2qnzN21LoRJqYo8i37bGP+vNFqYEG3k
         S4dw==
X-Received: by 10.180.89.140 with SMTP id bo12mr9093159wib.22.1369670003457;
 Mon, 27 May 2013 08:53:23 -0700 (PDT)
In-Reply-To: <CAPLrYER960BeuYE31f=ES=m25O6PPpDUrXzRCTAhhaTROQbakQ@mail.gmail.com>
Xref: news.gmane.org gmane.linux.lib.musl.general:3369
Archived-At: <http://permalink.gmane.org/gmane.linux.lib.musl.general/3369>

2013/5/26, Daniel Cegie=C5=82ka <daniel.cegielka@gmail.com>:
> @Gregor Pintar
> What do you think about using tropicssl on libkripto (aka libssl and
> libcrypto in openssl)?
>
TropicSSL has quite nice API, but I think it would require API changes
(cipher suites) to get full advantage of "dynamic construction" of
algorithms (block cipher + mode + mac =3D authenticated stream cipher)
and kripto API is not finished yet so I can't really say.

> I looked at the difference between PolarSSL and tropicssl and
> differences are often purely cosmetic. I think we can apply the
> following changes in PolarSSL to tropicssl and thereby gain a small
> SSL library under a BSD license.
>
> http://gitorious.org/tropicssl
>
> Does anyone have a better suggestion?
>
Unless someone really takes a deep look (vulnerabilities, TLS 1.2)
into tropicssl, I think it's better to use PolarSSL for now despite
GPL.