[6411] in cryptography@c2.net mail archive
Re: BXA press release URL; and where to get the regs in HTML
daemon@ATHENA.MIT.EDU (Joe Francis)
Mon Jan 17 09:58:37 2000
Message-ID: <3882F1B3.97508325@netscape.com>
Date: Mon, 17 Jan 2000 02:43:29 -0800
From: jfrancis@netscape.com (Joe Francis)
Reply-To: jfrancis@netscape.com
MIME-Version: 1.0
To: cryptography@c2.net
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Given this:
" ``Open cryptographic interface''. A mechanism which is designed to
allow a customer or other party to insert cryptographic functionality
without the intervention, help or assistance of the manufacturer or its
agents, e.g., manufacturer's signing of cryptographic code or
proprietary interfaces. If the cryptographic interface implements a
fixed set of cryptographic algorithms, key lengths or key exchange
management systems, that cannot be changed, it will not be considered
an ``open'' cryptographic interface. All general application
programming interfaces (e.g., those that accept either a cryptographic
or non-cryptographic interface but do not themselves maintain any
cryptographic functionality) will not be considered ``open''
cryptographic interfaces."
Does that render moot the Apache problems with having crypto hooks? I'm
wondering if the hooks for that would qualify as a general programming
interface.
-joe francis
