From mboxrd@z Thu Jan 1 00:00:00 1970 Received: (from majordomo@localhost) by pauillac.inria.fr (8.7.6/8.7.3) id PAA19812; Fri, 20 Sep 2002 15:15:19 +0200 (MET DST) X-Authentication-Warning: pauillac.inria.fr: majordomo set sender to owner-caml-list@pauillac.inria.fr using -f Received: from concorde.inria.fr (concorde.inria.fr [192.93.2.39]) by pauillac.inria.fr (8.7.6/8.7.3) with ESMTP id PAA19741 for ; Fri, 20 Sep 2002 15:15:18 +0200 (MET DST) Received: from pauillac.inria.fr (pauillac.inria.fr [128.93.11.35]) by concorde.inria.fr (8.11.1/8.11.1) with ESMTP id g8KDFC522846; Fri, 20 Sep 2002 15:15:12 +0200 (MET DST) Received: (from xleroy@localhost) by pauillac.inria.fr (8.7.6/8.7.3) id PAA19593; Fri, 20 Sep 2002 15:15:11 +0200 (MET DST) Date: Fri, 20 Sep 2002 15:15:11 +0200 From: Xavier Leroy To: "Yurii A. Rashkovskii" Cc: Ohad Rodeh , caml-list@inria.fr Subject: Re: [Caml-list] OcamlSpread 0.0.1 released Message-ID: <20020920151510.A19108@pauillac.inria.fr> References: <14331741431.20020918205930@openeas.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <14331741431.20020918205930@openeas.org>; from yrashk@openeas.org on Wed, Sep 18, 2002 at 08:59:30PM +0300 Sender: owner-caml-list@pauillac.inria.fr Precedence: bulk > The question is not a speed, but strength of the algorithms. I think > that Ensemble *should* have storng algorithms for security or > pluggable interface to switch in OpenSSL, cryptokit or whatsoever. As Ohad said, OpenSSL offers more ciphers than my Cryptokit, and some of them probably run faster in OpenSSL, but still the ciphers and hashes supported by Cryptokit are entirely standard (AES, Triple DES, RC4, RSA, etc) and have no known cryptographic weaknesses -- provided adequate key sizes are selected, of course. Security holes are much more likely to arise as a consequence of incorrect use of these algorithms, e.g. at the cryptographic protocol level, than as a consequence of a weakness of the algorithms themselves. - Xavier Leroy ------------------- To unsubscribe, mail caml-list-request@inria.fr Archives: http://caml.inria.fr Bug reports: http://caml.inria.fr/bin/caml-bugs FAQ: http://caml.inria.fr/FAQ/ Beginner's list: http://groups.yahoo.com/group/ocaml_beginners