Re: [RFC][PATCH][BZ 2100] blowfish support in libcrypt

["Dmitry V. Levin" <ldv at altlinux dot org>]

On Tue, Jun 20, 2017 at 02:51:51PM +0300, Dmitry V. Levin wrote:
> On Tue, Jun 20, 2017 at 01:26:02PM +0200, Thorsten Kukuk wrote:
> > On Thu, Jun 01, Florian Weimer wrote:
> > 
> > > The other question is why we should add Blowfish support when the cipher
> > > is pretty much on everyone's banned list.
> > 
> > We should not add it. The whole interface is poorly designed and complicated
> > to use.
> 
> For more than 16 years that this interface (crypt_rn, crypt_ra, and
> crypt_gensalt*) is in use, it's called poorly designed and complicated
> to use for the first time AFAIK.  Thorsten, could you elaborate, please?
> 
> > And there are today better cipher. Blowfish is outdated today.
> 
> Well, bcrypt is not blowfish. :)

I think blanket objections like this don't help to reach a consensus.


-- 
ldv

Attachment: signature.asc
Description: PGP signature