Re: About P.Gutmann's critique of CIPE - etc. etc.
"R. Steve McKown" <[email protected]>
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <[email protected]> |
On Friday 26 September 2003 11:04 am, Les Mikesell wrote: > > From: Steve McKown > > > > CIPE's total code size is an order of magnitude smaller than the code > > size of just the openssl library. Over the life of a software product, > > there is a direct correlation between code size and both total defects > > and maintenance cost (time, effort). > > I think you should consider maturity and exposure as well. Hopefully the > time and effort spent on the larger product eventually result in getting > the bugs fixed and a larger exposure can result in finding the more obscure > ones sooner. Good points. I think both products show good maturity, although that could change for CIPE; more in a moment. It's also true that a larger exposure (i.e. user population) increases the rate of defects discovered. Of course, given that a more complex product has more total defects, it needs a larger exposure to achieve a higher defect discovery rate to keep up its progress. This process is often exponential, so that a more complex product needs exponentially more users. This is how, in part, Linux could deliver better reliability than Windows98. Linux had, what, 1% of Win98's the installed base? Yet this was enough to maintain a product with a much, much larger percentage relative to features. CIPE is certainly at a cross-roads because of the security concerns and the changes in developer resources (see Olaf's post) that leave the resolution picture unclear as of yet. I think maturity and exposure are sufficient for CIPE -- if the current concerns can be addressed timely to maintain the customer base. If the customer base falls too much, maturing changes will take much longer, which has a host of nasty consequences. But don't forget the benefits of simplicity. New developers (or more time from existing ones) will be efficient fast. A timely resolution and some effort to increase the customer base pulls CIPE through, in a better position than it was a week ago. All the best, Steve McKown Titanium Mirror, Inc. -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>