OpenBSD Cryptography

The Export Control List of Canada places no significant restriction on the export of cryptographic software, and is in fact even more explicit about the free export of freely-available cryptographic software. Marc Plumb has also done a fair bit of research to test the cryptographic laws.

Hence the OpenBSD project has embedded cryptography into numerous places in the operating system. We require that the cryptographic software we use be freely available and with good licenses. We do not use cryptography with nasty patents. We also require that such software is from a countries with useful export licenses because we do not wish to break any laws at all.

• Strong blowfish based password entries.
• KerberosIV fully integrated.
• IPSEC with 10+ ciphers integrated into the OS.
• IPSEC Photuris daemon
• Strong random number components used in numerous places.
• All the normal DES code in libc, where it belongs.
• (What have I missed?)