>i don't see without a signature file how you know the decryption
>function succeeded and therefore returned a complete, authentic,
>unaltered, package. (rather than returning garbage).
If the decrypted file is garbage then gunzip will fail with an error code.
LRP doesn't need to know why it failed, just that it did fail and to halt
the loading of the package. This is what LRP does right now when loading
packages.
This code is taken from the linuxrc script in Eiger:
qt gunzip < $MNT/$f.lrp > /dev/null
if [ $? -eq 0 ]; then
echo -n " $f"
gunzip < $MNT/$f.lrp | qt untar
echo "$f">>/var/lib/lrpkg/packages #Update installed packages file
else
echo -n " $f(cpt!)"
fi
</x-flowed>