From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E3C2E138334 for ; Sat, 4 Aug 2018 18:07:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CC32DE0805; Sat, 4 Aug 2018 18:07:38 +0000 (UTC) Received: from mx-out2.startmail.com (mx-out2.startmail.com [145.131.90.155]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 5C02AE07A9 for ; Sat, 4 Aug 2018 18:07:38 +0000 (UTC) Date: Sat, 4 Aug 2018 13:05:56 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=startmail.com; s=2017-11; t=1533406056; bh=ftmwND7W1tes3EXRewYnTdq5qS1Qq+Il4rBE38YIpZA=; h=Date:From:To:Subject:References:In-Reply-To:From; b=OZ3yFO9gMhTWDwiFkUhUJvQbuHpOIc8OnxXEBs/asvAnqAtc1TqrT9yoqeBpCD/V1 LHPJYTfovTo21a1JYV6ecg2tPrcT0TvH0l5YpAkq/Vz5nVMqpIQz+87CYwOnQC+Y4j budNrG7sRJT20M+RKXBKymSsxzbO12blgDjCR6+OsEbQtckoJ2SiuXx5/leaVudBUE JhLpItu1rwzzvB44s2eeqF2upbe8CivVMchXUDoSlCgqTWqzQo8FpZPklb+nOOpGnh gEvi9XAQ2lyF7U8WZ99ufJS/ul6PRxeTKJYpfflX5axqP3eFBy4oJ8G9Bv57bXClgn OntJSaLO7fRTg== From: "Marty E. Plummer" To: gentoo-dev@lists.gentoo.org Subject: Re: mcrypt status (Re: [gentoo-dev] Idea for a new project: gentoo-libs) Message-ID: <20180804180554.vdzinpcbqsh7s2ol@proprietary-killer> References: <20180623025046.djmsv44moxuqkv6t@proprietary-killer> <20180625075947.03bd4875@computer> <20180804114328.d4b31c885eba7cb98a1b5fd2@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20180804114328.d4b31c885eba7cb98a1b5fd2@gentoo.org> X-Archives-Salt: 930eb47d-b8c6-4e64-99df-1c8a5eb29f9a X-Archives-Hash: b97f0bd8466a4f3954ee41efcb680928 On Sat, Aug 04, 2018 at 11:43:28AM +0300, Andrew Savchenko wrote: > On Mon, 25 Jun 2018 07:59:47 +0200 Hanno Böck wrote: > > On Fri, 22 Jun 2018 21:50:50 -0500 > > "Marty E. Plummer" wrote: > > > > > So, as you may be aware I've been doing some work on moving bzip2 to > > > an autotools based build. Recently I've ran into app-crypt/mhash, > > > which is in a semi-abandoned state (talking with the maintainer on > > > twitter atm), and I was thinking it may be a good idea to set up a > > > project for keeping these semi-abandoned and really-abandoned > > > libraries and projects up to date and such. > > > > This is a common problem, however if you want to make this reasonable > > you wouldn't make it a gentoo thing, but a cross-distro effort. The > > idea has been tossed around a lot, but noone yet started implementing > > it. > > > > However keeping things alive may not always be the right option. > > There's a reason mcrypt is abandoned. It's an ancient crypto library, > > crypto is moving forward, there are better options. > > Do you have any evidence that mcrypt should not be used? > > Symmetric cryptography is quite conservative and it took years and > even decades for algorithms and their implementations to become > trusted, so there is nothing wrong in using good old verified > software. > > Actually for local symmetric encryption this is the best tool I > know. > > Best regards, > Andrew Savchenko It seems that every last person commenting on this is talking mcrypt, not mhash, which is what I mentioned in the first place. As far as I can tell, these are entirely differnt projects which just happen to have a similar name.