[OTR-users] Openssl fiasco and otr...

[Jean-Baptiste Zeller]

Sam's Lists wrote:
> Hi...
>
> I'm 99% positive the answer is that otr in no relies on any of the 
> openssl infrastructure.  But given the recent Debian/Ubuntu fiasco I 
> just want to double check.  Can someone confirm that I have nothing to 
> worry about?
>
> Thanks
OTR don't use a single line of code from OpenSSL, the prng used is the 
one in the libgcrypt library, which isn't concerned as far as I know.

So I guess we can sleep well now that it's covered.

Jean-Baptiste Zeller
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3307 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080519/d038d634/attachment.bin>