[EMAIL PROTECTED] dixit:

>* dropping exotic IPSec encryption algorithm to save space

You remember what happened last time when someone dropped
algorithms? Correct! Users complained because this broke
their VPN setups.

>+-CONFIG_KLIPS_ALG_BLOWFISH=m
>++CONFIG_KLIPS_ALG_BLOWFISH=n

You know that this one is probably the fastest block cipher
algorithm out there which is still secure, and has a very
small code size (I implemented it in x86 asm in <100 Bytes)?

>+-CONFIG_KLIPS_ALG_MD5=m
>+-CONFIG_KLIPS_ALG_SHA1=m
>+-CONFIG_KLIPS_ALG_SHA2=m
>++CONFIG_KLIPS_ALG_MD5=n
>++CONFIG_KLIPS_ALG_SHA1=n
>++CONFIG_KLIPS_ALG_SHA2=n

I don't really understand why you're disabling these standard hashes?

//mirabile
-- 
I believe no one can invent an algorithm. One just happens to hit upon it
when God enlightens him. Or only God invents algorithms, we merely copy them.
If you don't believe in God, just consider God as Nature if you won't deny
existence.              -- Coywolf Qi Hunt
_______________________________________________
freewrt-developers mailing list
[email protected]
https://www.freewrt.org/lists/listinfo/freewrt-developers

Reply via email to