Re: CARP for squid 1.2

--MimeMultipartBoundary
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I may be out of date, but MD5 being a 'strong cryptographic hash
algorithm' _used_ to be restricted for import and export under the ITAR
regulations.

I don't know if this is still the case. Generated hashes are fine, but
the actual code is not (err.._was_ not...unless it was exempted or one
of the new crypto resolutions got passed, it's probably still on the
munitions list).

Probably worth asking a cipher-punk about this one. I'm not one.

D

Alex Rousskov wrote:
>
> On Mon, 1 Jun 1998, Dancer wrote:
>
> > Alex Rousskov wrote:
> > > Can we use MD5s instead of computing hash values from scratch?
> > Tricky. MD5 is under ITAR export/import control. You have it, and we
> > have it. But the USA and Canadian governments forbid us giving
> > each-other additional copies. @whee. Despite the growing air of
> > religious freedom in encryption circles, I would think carefully before
> > including any of the MD hash sequences, much as they remain distinct in
> > the Apache distributions. (or at least they used to. Not sure on the
> > current state of art)
>
> Hmm.. Squid already uses MD5 for cache (store entry) keys. Cache Digests hash
> function is also based on MD5. What do you mean by "including MD hash
> sequences"?
>
> Almost scared,
>
> Alex.

-- 
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GAT d- s++: a C++++$ UL++++B+++S+++C++H++U++V+++$ P+++$ L+++ E-
W+++(--)$ N++ w++$>--- t+ 5++ X+() R+ tv b++++ DI+++ e- h-@ 
------END GEEK CODE BLOCK------
--MimeMultipartBoundary--