[tahoe-dev] Windwos installation problems
Zooko O'Whielacronx
zookog at gmail.com
Sat Jun 20 23:31:13 PDT 2009
Okay, folks, I went ahead and applied the patch to pycryptopp to strip
out the timer-based defenses against RNG-repeat (e.g. due to vm
rollback): [1]. Black Dew went ahead and confirmed that this made
pycryptopp build on unpatched MinGW. I updated the MinGW bug report
[2].
I'm not entirely comfortable with "weakening" Crypto++ like this,
especially because it is reminiscent of the recent Debian-OpenSSL
fiasco, but I'm pretty sure no real danger is introduced into
pycryptopp this way.
Regards,
Zooko
[1] http://allmydata.org/trac/pycryptopp/changeset/20090621051014-92b7f-3489ac19e9b0fde0c44943d20b603b860a89bf1f
[2] https://sourceforge.net/tracker/?func=detail&aid=2805976&group_id=2435&atid=302435
More information about the tahoe-dev
mailing list