On Thu, Mar 20, 2008 at 07:47:41AM -0400, Jesse Keating wrote:
On Thu, 2008-03-20 at 10:23 +0100, Patrice Dumas wrote:
> Then we have to register crypto packages somewhere such that the people
> in charge can do the paperwork, isn't it? Don't we need a guideline
> here?
I actually need to prep a guideline that has all packages with crypto
technology block FE-LEGAL (if that's still the alias). We'll use that
to get an audit of the code to make sure its either not new crypto, or
if it is, alert the appropriate people for export filings.
Hate to be difficult, but what about a package like ocaml-cryptokit
which originates outside the US?
http://pauillac.inria.fr/~xleroy/software.html#cryptokit
(I don't think that particular package has anything which could be
described as "new crypto").
Rich.
--
Richard Jones, Emerging Technologies, Red Hat
http://et.redhat.com/~rjones
virt-top is 'top' for virtual machines. Tiny program with many
powerful monitoring features, net stats, disk stats, logging, etc.
http://et.redhat.com/~rjones/virt-top