We have and will continue to publicly state that we will welcome implementations of government-mandated ciphers as long as the implementations are clean and they are appropriately licensed, and everyone does *not* need to use them. This is the reason, for example, that we include the french government mandated elliptic curves, and will welcome a cleaned up GOST, and appropriately licensed Camiella.
I personally would never use GOST myself. But if you are doing business in Russia you may have no choice. We would rather such people could use the same API as everything else and not have to be a special case, introducing more bugs into software just to comply with government requirements. Two simple rules: 1) It can't mess up the code base for everyone. 2) Everyone should not need to eat the dog food At that point it's your call if you use it or not. On Thu, Nov 6, 2014 at 5:44 AM, Alexey Suslikov <alexey.susli...@gmail.com> wrote: > Chris Cappuccio <chris <at> nmedia.net> writes: > >> So, you're saying, he's really dmitry <at> svr.gov.ru, the source of > Russian >> backdoors into technology worldwide!!! >> >> I guess the open-source ecosystem has been thoroughly poisoned! >> >> Putin is going to take us over. OpenBSD and Linux are ruined! Fuck, I'm >> switching to Windows 8. > > Not enough played with RSA government backdoors, you just said you > trust another GOST (which stands for 'GOvernment STandard'). >