===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/crypto.html,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -r1.6 -r1.7
--- www/crypto.html	1998/02/20 21:55:56	1.6
+++ www/crypto.html	1998/02/20 22:05:02	1.7
@@ -33,27 +33,32 @@
 use be <a href=policy.html>freely available and with good licenses</a>.
 We do not use cryptography with nasty patents.
 We also require that such software is from a countries with useful export
-licenses because we do not wish to break the laws of any country.
+licenses because we do not wish to break the laws of any country.<p>
 
+We use strong and weak crypto in different parts of the system:
+
 <ul>
-<li>Strong blowfish based password entries.
+<li>Strong blowfish based password entries with 128-bit salt and a
+	strength-control mechanism for the system administrator.
 <li>KerberosIV fully integrated.
 <li>IPSEC with 10+ ciphers integrated into the OS.
-<li>IPSEC Photuris daemon
-<li>Strong random number components used in numerous places. 
-<li>All the normal DES code in libc, where it belongs.
+<li>The IPSEC Photuris daemon.
+<li>Strong random number components are used in numerous places. 
+<li>All the normal DES code is in libc (where it belongs).
+<li>DNS id pseudo-randomization.
 <li>(What have I missed?)
 </ul>
 <p>
 
 When we make OpenBSD releases or snapshots we do our build processes
 in free countries to assure that the sources and binaries we provide
-to users are free of tainting.<p>
+to users are free of tainting.  In the past our release binary builds
+have been done in Canada, Sweden, and Germany.<p>
 
 <hr>
 <font size="-1">
 <em>This site Copyright &copy; 1996-1998 OpenBSD.</em><br>
-$OpenBSD: crypto.html,v 1.6 1998/02/20 21:55:56 deraadt Exp $
+$OpenBSD: crypto.html,v 1.7 1998/02/20 22:05:02 deraadt Exp $
 </font>
 
 </BODY>