From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 5AB05138334 for ; Sat, 4 Aug 2018 08:43:39 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 35A3FE0831; Sat, 4 Aug 2018 08:43:35 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id C6214E082B for ; Sat, 4 Aug 2018 08:43:34 +0000 (UTC) Received: from localhost (unknown [91.246.100.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: bircoph) by smtp.gentoo.org (Postfix) with ESMTPSA id 882A8335CD6 for ; Sat, 4 Aug 2018 08:43:32 +0000 (UTC) Date: Sat, 4 Aug 2018 11:43:28 +0300 From: Andrew Savchenko To: gentoo-dev@lists.gentoo.org Subject: mcrypt status (Re: [gentoo-dev] Idea for a new project: gentoo-libs) Message-Id: <20180804114328.d4b31c885eba7cb98a1b5fd2@gentoo.org> In-Reply-To: <20180625075947.03bd4875@computer> References: <20180623025046.djmsv44moxuqkv6t@proprietary-killer> <20180625075947.03bd4875@computer> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.30; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="PGP-SHA512"; boundary="Signature=_Sat__4_Aug_2018_11_43_28_+0300_rzod.UPJ0myRKrBN" X-Archives-Salt: e3069fad-400f-4748-92c7-25fbd63950e6 X-Archives-Hash: b203b5b1ca137d7be4d737511df975aa --Signature=_Sat__4_Aug_2018_11_43_28_+0300_rzod.UPJ0myRKrBN Content-Type: text/plain; charset=UTF-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, 25 Jun 2018 07:59:47 +0200 Hanno B=C3=B6ck wrote: > On Fri, 22 Jun 2018 21:50:50 -0500 > "Marty E. Plummer" wrote: >=20 > > So, as you may be aware I've been doing some work on moving bzip2 to > > an autotools based build. Recently I've ran into app-crypt/mhash, > > which is in a semi-abandoned state (talking with the maintainer on > > twitter atm), and I was thinking it may be a good idea to set up a > > project for keeping these semi-abandoned and really-abandoned > > libraries and projects up to date and such. >=20 > This is a common problem, however if you want to make this reasonable > you wouldn't make it a gentoo thing, but a cross-distro effort. The > idea has been tossed around a lot, but noone yet started implementing > it. >=20 > However keeping things alive may not always be the right option. > There's a reason mcrypt is abandoned. It's an ancient crypto library, > crypto is moving forward, there are better options. Do you have any evidence that mcrypt should not be used? Symmetric cryptography is quite conservative and it took years and even decades for algorithms and their implementations to become trusted, so there is nothing wrong in using good old verified software. Actually for local symmetric encryption this is the best tool I know. Best regards, Andrew Savchenko --Signature=_Sat__4_Aug_2018_11_43_28_+0300_rzod.UPJ0myRKrBN Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE63ZIHsdeM+1XgNer9lNaM7oe5I0FAltlZzAACgkQ9lNaM7oe 5I2O6A/9GNCHn6QIyBmXjUuDDgwqs1XLkX92t24WvsRdlN9kSW8eAgtF/qCfL5jf OO+Z/L5s73kEe0hFmEqI5EOpimBw6AA5KykZLTvzbSUDVtrODAaba7EzT97EXIYM TnybtBX8J98wWV+e/Y/PfJ3OFoq5cV9s9jFZrmnVhTcrE8NzNVOOIvHnF/TyxJlG GqUZR2ONCMptPPEY+yDJRwyXJKUUchmowGqSyu8ZE2VqvCOdoVu+kRBxg75pbzJY OgetT13LMuGWAhg0Ci7v3dWSOM7KYDOvLzEct/bq1lg/aH82ektl7CkHyDeFezS+ gNGP+HIq99VZp46qUOXDFq5cVakrX0STgdZoz40S1bwPxgjQn9QeX9JVc2GvqfnO 1qIakdkgKseK94dgoOZDD3EEYjr84rUUMgEeM8SmcjvevbW1TNCDoifonK2vPSKf yT0uYksoHeqQ4W9bF2Q0/joGDXHPeBEk9F/r+BaAsNjc4iluI0Okuaxckj5B8yws MBuhUKLtCaxyi+TErrUorvk2MX1SmNnzN4jAagO/IjS9928mLfJ/FqK64Glbyk2S /s6otf8dhuoqOgNkhZR3hcPc0edRKSZWf0quipBj4sLNz7n4FgLsRP5ek5OIoONp dSnEpRA5bURmJQVcaw9ikwadFa80vKB0EfEtPJpHLEy6Ta34rMw= =roYY -----END PGP SIGNATURE----- --Signature=_Sat__4_Aug_2018_11_43_28_+0300_rzod.UPJ0myRKrBN--