encrypted file integration into KDE

[Ingo Klöcker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Saturday 27 April 2002 19:46, Roberto Alsina wrote:
> On Fri, 26 Apr 2002, George Staikos wrote:
>
> [snip, so we agree on the basics, good :-]
>
> > > Then Konqueror can open the encrypted file using the above data,
> > > the api to decrypt should look pretty much like KTar, only with
> > > plugins for algos?
> >
> >    Yes.  That part as you see is easy.  The hard part is coming up
> > with a flexible, reusable, appropriate crypto backend.  Something
> > that won't confuse the user too much, but is safe and powerful,
> > follows KDE development models, and is light.
>
> A candidate: libmcrypt
>
> http://mcrypt.hellug.gr/
>
> Uses standard algorithms (3DES, IDEA, etc, has a lot of them)
>
> There is already a CLI tool using it, so you could open the files
> outside of KDE (that is a must).
>
> There is a library form, so it can be called from KDE.
>
> License is lgpl, so we can use it or tune it.

How on earth can a lgpl licenced library implement a patented algorithm 
(IDEA) which must not be used in a commercial environment without 
paying some license fee to the swiss company which owns the IDEA 
patent?
I'm just wondering. If you want to make use of this library you have to 
make sure that the IDEA algorithm is never used in KDE.

You should anyway only use AES and no other encryption algorithm.

Regards,
Ingo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8yvEoGnR+RTDgudgRAoXaAKCH1gk+ADFrS3y7KEVdPlZhCnkgNACgqvxg
QOeT5+XyRGqX7SVugnVaf1k=
=aksN
-----END PGP SIGNATURE-----