Re: ABI guarantees

Lexi Winter <[email protected]> Mon, 18 Aug 2025 22:01:46 +0100

Newsgroups	gmane.os.freebsd.architechture
Message-ID	<[email protected]>

Vadim Goncharov:
> Don't know about IPsec but deleting blowfish was surely a mistake - it is
> not broken and could be used e.g. in IoT where space constraints matter, for
> those who know what they are doing.

Blowfish (along with 3DES) was broken by Sweet32.  it might still be
secure with certain specific constraints (like regular key rotation)
but i don't think it's wrong to err on the side of not shipping known
broken cyphers.

signature.asc (application/pgp-signature, 228 B)