> The question is not a speed, but strength of the algorithms. I think
> that Ensemble *should* have storng algorithms for security or
> pluggable interface to switch in OpenSSL, cryptokit or whatsoever.

As Ohad said, OpenSSL offers more ciphers than my Cryptokit, and some
of them probably run faster in OpenSSL, but still the ciphers and
hashes supported by Cryptokit are entirely standard (AES, Triple DES,
RC4, RSA, etc) and have no known cryptographic weaknesses -- provided
adequate key sizes are selected, of course.

Security holes are much more likely to arise as a consequence of
incorrect use of these algorithms, e.g. at the cryptographic protocol
level, than as a consequence of a weakness of the algorithms
themselves.

- Xavier Leroy
-------------------
To unsubscribe, mail caml-list-request@inria.fr Archives: http://caml.inria.fr
Bug reports: http://caml.inria.fr/bin/caml-bugs FAQ: http://caml.inria.fr/FAQ/
Beginner's list: http://groups.yahoo.com/group/ocaml_beginners