[gentoo-dev] IDEA support in app-crypt/gnupg

[Tavis Ormandy]

gnupg includes an implementation of IDEA, for use in countries where it
can be distributed under the GPL (all countries except AUSTRIA, FRANCE,
GERMANY, ITALY, JAPAN, THE NETHERLANDS, SPAIN, SWEDEN, SWITZERLAND, THE
UK AND THE US).

Someone requested an idea USE flag in #28870, which is simple to
implement..is it safe to add this flag, with a warning about countries
where it is not permitted and using the nomirror RESTRICTion ? or should
we just avoid this code, as only a few users who would be interested in
would be permitted to use it?

it is also possible to build it as a module, seperately from gnupg
(although the developers reccomend building it statically if possible),
is this more desirable?

or, I could just mark this bug WONTFIX...

http://www.gnupg.org/why-not-idea.html

example patch to gnupg-1.2.3-r5.ebuild that would enable IDEA.

--- gnupg-1.2.3-r5.ebuild	2003-12-03 22:22:01.000000000 +0000
+++ gnupg-1.2.3-r6.ebuild	2003-12-03 22:39:32.000000000 +0000
@@ -6,11 +6,13 @@
 
 DESCRIPTION="The GNU Privacy Guard, a GPL pgp replacement"
 HOMEPAGE="http://www.gnupg.org/"
-SRC_URI="ftp://ftp.gnupg.org/gcrypt/gnupg/${P}.tar.bz2"
+SRC_URI="ftp://ftp.gnupg.org/gcrypt/gnupg/${P}.tar.bz2 
+	idea? ( ftp://ftp.gnupg.dk/pub/contrib-dk/idea.c.gz )"
 SLOT="0"
-LICENSE="GPL-2"
+LICENSE="GPL-2 IDEA"
 KEYWORDS="~x86 ~alpha ~sparc ~hppa ~ia64"
-IUSE="X ldap nls static caps"
+IUSE="X ldap nls static caps idea"
+RETRICT="nomirror"
 
 RDEPEND="!static? ( ldap? ( net-nds/openldap )
 		caps? ( sys-libs/libcap )
@@ -46,6 +48,12 @@
 	#
 	# http://www.s-quadra.com/advisories/Adv-20031203.txt
 	cd ${S}; epatch ${FILESDIR}/${P}-hkp-format-string.diff
+
+	# implement the IDEA algorithm, for distribution in countries
+	# where the patent does not apply.
+	if use idea; then
+		mv ${WORKDIR}/idea.c ${S}/cipher/idea.c || ewarn "failed to insert IDEA module"
+	fi
 }
 
 src_compile() {
@@ -119,4 +127,11 @@
 		einfo "This is needed in order to have a secure place to store your"
 		einfo "passphrases, etc. at runtime but may make some sysadmins nervous."
 	fi
+	echo
+	if use idea; then
+		einfo "you have compiled gnupg with support for the IDEA algorithm, this code"
+		einfo "is distributed under the GPL in countries where it is permitted to do so"
+		einfo "by law."
+		einfo "Please read http://www.gnupg.org/why-not-idea.html for more information"
+	fi
 }

-- 
-------------------------------------
taviso@××××××××××××.org | finger me for my gpg key.
-------------------------------------------------------

--
gentoo-dev@g.o mailing list