Re: CIPE - Encrypted IP Encapsulation

Trevor Johnson (trevor@jpj.net)
Mon, 3 Aug 1998 03:00:19 -0400 (EDT)


> Are there any plans for a CIPE-like networking option in the kernel? or
> just addons like this? Or wold it be possible just to merge the CIPE tree
> into the kernel (it appears ready for it to be inserted into the
> kernel..).

> -- Max Inux <maxinux@bigfoot.com> Hey Christy!!!! KeyID 0x8907E9E5
> Kinky Sex makes the world go round O R Strong crypto makes the world safe
> If crypto is outlawed only outlaws will have crypto
> Fingerprint(photo soon): 259D 59F7 D98C CD73 1ACD 54Ea 6C43 4877 8907 E9E5

Judging from your signature, I think you can easily guess the answer. :)
Perhaps something along these lines is worth putting in the FAQ.

Q: I need encryption and steganography. Why isn't it in the kernel?

A: In France and Russia, strong encryption is essentially illegal:
according to http://cwis.kub.nl/~frw/people/koops/jenc8bjk.htm, using it
there requires a license which is seldom granted. The United States has
cumbersome restrictions on exporting such software (it's considered a
"munition"--see http://www.epic.org/crypto/export_controls/). Having
these features in the standard kernel would therefore cause great
inconvenience to people in those countries. However, separate programs
and patches to the kernel are available at
ftp://ftp.csua.berkeley.edu/pub/cypherpunks/filesystems/linux/,
http://fractal.mta.ca/pub/crypto/aem/ (*),
http://www.cygnus.com/~gnu/swan.html,
http://www.inka.de/~bigred/devel/cipe.html,
http://www.quick.com.au/ftp/pub/sjg/, http://www.cs.hut.fi/ssh/,
http://web.mit.edu/kerberos/www/, and other places.

(*) Andrew Mileski's site was down when I tried it just now, so perhaps
this is out of date.
__
Trevor Johnson

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html