- o The EVP and ASN1 stuff is a mess. Currently you have one EVP_CIPHER
- structure for each cipher. This may make sense for things like DES but
- for variable length ciphers like RC2 and RC4 it is NBG. Need a way to
- use the EVP interface and set up the cipher parameters. The ASN1 stuff
- is also foo wrt ciphers whose AlgorithmIdentifier has more than just
- an IV in it (e.g. RC2, RC5). This also means that EVP_Seal and EVP_Open
- don't work unless the key length matches the fixed value (some vendors
- use a key length decided by the size of the RSA encrypted key and expect
- RC2 to adapt).
-
- o Properly initialize the PRNG in the absence of /dev/random.
-
- o > NO_RSA (ejs@bfd.com)
- > ./Configure -DNO_IDEA -DNO_RC5 -DNO_RC4 -DNO_RC2 -DNO_RSA -DNO_ERR linux-elf
- > I tried for a whole day to do this and could not get it to work. Linux
- > machine, kernel 2.0.36 and 2.2.1, redhat 5.2 latest, gcc and egcs , no
- > go. I also noticed the even with -DNO_IDEA, _DNO_RC2, etc. the make
- > still goes into those subdirectories and 'makes'.
-
- o The "exported" header files should not use #include "foo.h", but
- #include <foo.h> or even better #include <ssl/foo.h> or
- #include <openssl/foo.h> in order to avoid filename clashes.
-
- o ERR_error_string(..., buf) does not know how large buf is,
- there should be ERR_error_string_n(..., buf, bufsize)
- or similar.
-