Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 24 Mar 2006 20:31:23 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: JTR and big patch

On Fri, Mar 24, 2006 at 04:56:02PM +0000, Hari Sekhon wrote:
> Why does the big patch simply not be incorporated directly in to JTR?

JtR is meant to be very portable, with no dependencies on external
libraries which might or might not be available on a given system.

The jumbo patch currently depends on OpenSSL 0.9.7+.  Older versions of
the patch depended on libdes.

Then, some of the contributed patches are not of an adequate code
quality for inclusion (per my standards), there's some code duplication,
and the implementations are far from optimal.  (Yet it is very helpful
that those patches are available!)

I'd like to clean up the source code for the official JtR somewhat, then
proceed with adding more hash and cipher types.  Ideally, there should
be fairly optimal yet generic enough implementations of cryptographic
primitives that newly added high-level hash and cipher types could use,
without having to bring in their own low-level crypto (unoptimal and
duplicate code) or depend on third-party libraries.

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.