Hal Murray <hmur...@megapathdsl.net>:
>
> EVP_MD_CTX_FLAG_NON_FIPS_ALLOW is only used in libntp/macencrypt.c
>
> EVP_MD_CTX_init(&ctx);
> #ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW
> /* MD5 is not used as a crypto hash here. */
> EVP_MD_CTX_set_flags(&ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
> #endif
> if (!EVP_DigestInit_ex(&ctx, EVP_md5(), NULL)) {
>
> That's in addr2refid for hashing IPv6 addresses to fit into a 4 byte slot.
>
> Either we don't need that, or we need it in other places.
Maybe not. I went looking for other places the refid computation is done
and that seems to be it. What other other places did you have in mind?
--
<a href="http://www.catb.org/~esr/";>Eric S. Raymond</a>
_______________________________________________
devel mailing list
devel@ntpsec.org
http://lists.ntpsec.org/mailman/listinfo/devel
