<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hello all,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>I’ve been looking into FIPS
but couldn’t help falling over the Squeak Pluggin for OpenSSL and
Stunnel. </span></font><font size=2 face=Verdana><span style='font-size:10.0pt;
font-family:Verdana'><a href="https://lists.wisc.edu/read/messages?id=181840">https://lists.wisc.edu/read/messages?id=181840</a><o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font size=2 face=Verdana><span
style='font-size:10.0pt;font-family:Verdana'> <o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font size=2 face=Verdana><span
style='font-size:10.0pt;font-family:Verdana'><a
href="https://lists.wisc.edu/read/messages?id=183375">https://lists.wisc.edu/read/messages?id=183375</a><o:p></o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font size=2 face=Verdana><span
style='font-size:10.0pt;font-family:Verdana'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> I haven’t tried them yet but was wondering
if anyone else has. Does it make sense to move forward with our own FIPS
certification, or would it make sense to tightly integrate both openSSL and
Stunnel into squeak instead?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Does anyone have any thoughts about the benefits and
drawbacks of having the cryptographic code be an external black box? Are
there greater benefits to our having implemented our own code, for education
and flexibility … ? Personally I would prefer having the code
be in squeak, but I thought the question worth asking. Should we do both?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Thoughts?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Ron Teitelbaum<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Squeak Cryptography Team Leader<o:p></o:p></span></font></p>
</div>
</body>
</html>