[fpc-pascal] HMAC_SHA1 and FPC

silvioprog silvioprog at gmail.com
Tue Apr 2 07:57:11 CEST 2013


2013/4/2 Noah Silva <shiruba at galapagossoftware.com>

> Hi,
>
> Actually I think on OS X and Linux it makes sense to depend on OpenSSL,
> but not for the reasons you mentioned so much as one more: Security.  If
> you are using doing encryption, then it's better to use a library that is
> updated more often for bug fixes, and to have the updates be applied to
> your program automatically.  If you static-link it in, it will never be
> updated until you update it and ship a new version of your program and
> everyone installs it.  If you dynamically link to it, then then the
> operating system updates it, you get the updates "for free".
>
> After bad past experiences with VB and OCX files that broke all the time,
> and Java (enough said), I vastly prefer to use Pascal code in most cases
> and have everything linked static (less moving parts = less to break) - but
> there can be exceptions. (I use SQLite a lot, which isn't included by
> default in Windows).  For HMAC only though I just use Synapse.
>
> Thank you,
>     Noah Silva
>

Well, who wants to link and configure an entire DLL to use only a single
function, so be it. Who wants to use and configure an entire lib (Synapse,
DCPcrypt etc) to use only a single function, so be it. But nothing prevents
that it being implemented directly in the FCL, quick to declare/use.

Sorry, but I'll stop commenting in this topic. Now I feel like a dog trying
to chasing its own tail (
http://stream1.gifsoup.com/webroot/animatedgifs6/2077970_o.gif). :p

-- 
Silvio Clécio
My public projects - github.com/silvioprog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freepascal.org/pipermail/fpc-pascal/attachments/20130402/38d6d315/attachment.html>


More information about the fpc-pascal mailing list