On 5/29/06, Callum Lerwick <seg(a)haxxed.com> wrote:
On Wed, 2006-05-24 at 10:08 -0500, Chris Adams wrote:
> Once upon a time, Bernardo Innocenti <bernie(a)develer.com> said:
> > What's wrong with GPL programs using the Mozilla implementation?
> > Last time I checked NSS was totally GPL compatible.
> mozilla-nss requires mozilla-nspr. libnss3.so also pulls in
> libpthread.so. Those are pretty heavy requirements for SSL.
Even OpenSSL is so bloaty that the smallest I can get it down to (on
MIPS, who's code size seem to be about 2x i386) is 1.5mb. Making it
impossible to fit into the 2mb flash on a belkin router. Sigh.
There's MatrixSSL, but there's next to nothing that actually uses it...
What do you want to do in 2MB? I mean in that space I doubt you could
get many encryption algorithm beyond 1 or 2 ( one for key exchange,
one for cipher). At that size point, I would just look for whatever
encryptions are in the kernel source code and use those all the time.
Stephen J Smoogen.
CSIRT/Linux System Administrator