[Integrit-users] poll: integrit source distro size and BeeCrypt

[Ed L C. <ec...@co...>]

Hi, everyone.  I'd like to fish for comments.  I'm still waiting for a
response from the openssl core group regarding distribution of an
integrit binary that's been statically linked against openssl.

Meanwhile, I've discovered BeeCrypt:

    http://www.virtualunlimited.com/products/beecrypt/

... which is LGPL and has MD5 and SHA-1 hashing implementations.  The
SHA-1 has an assembly implementation and the author, Bob Deblier, is
planning an assembly MD5 implementation, so I'm not worried that it
will be compeditive with openssl in terms of performance.

I asked them about distributing a statically-linked binary integrit
linked against libbeecrypt, including only the files for MD5 and SHA-1
in the integrit source.  They responded with an offer that they'd be
happy with that if I include the whole BeeCrypt source tree in the
integrit source tree.

That would increase the size of the integrit source distribution from
about 150K to about 290K.  (Compared to 214K for aide and 1,725K for
tripwire.)

What's the general feeling out there?  Would anyone mind a bigger
source distribution or is it worth it in order to be able to
distribute binaries?

-- 
--Ed Cashin                    integrit file verification system
  ec...@co...          http://integrit.sourceforge.net/