29e444
#
29e444
# Needs to go upstream.
29e444
#
29e444
# 2013-09-13  Carlos O'Donell  <carlos@redhat.com>
29e444
#
29e444
#	* manual/crypt.tex (Cryptographic Functions): Using SunRPC and
29e444
#	AUTH_DES will prevent FIPS 140-2 compliance. Add cindex for
29e444
#	AUTH_DES and FIPS 140-2.
29e444
#	(DES Encryption): Add cindex FIPS 46-3.
29e444
#
29e444
--- glibc-2.17-c758a686.orig/manual/crypt.texi	2013-09-13 03:02:40.891987663 -0400
29e444
+++ glibc-2.17-c758a686/manual/crypt.texi	2013-09-13 03:04:02.082380415 -0400
29e444
@@ -30,8 +30,15 @@
29e444
 and the other based on the Data Encryption Standard (DES) that is
29e444
 compatible with Unix systems.
29e444
 
29e444
+@cindex AUTH_DES
29e444
+@cindex FIPS 140-2
29e444
 It also provides support for Secure RPC, and some library functions that
29e444
-can be used to perform normal DES encryption.
29e444
+can be used to perform normal DES encryption. The use of DES when
29e444
+using @code{AUTH_DES} in Secure RPC for authentication as provided by
29e444
+@theglibc{} is not FIPS 140-2 compliant nor is any other use of DES
29e444
+within @theglibc{}. It is recommended that Secure RPC should not be used
29e444
+for systems that need to be FIPS 140-2 compliant since all forms of
29e444
+supported authentication use normal DES.
29e444
 
29e444
 @menu
29e444
 * Legal Problems::              This software can get you locked up, or worse.
29e444
@@ -203,6 +210,7 @@
29e444
 @node DES Encryption
29e444
 @section DES Encryption
29e444
 
29e444
+@cindex FIPS 46-3
29e444
 The Data Encryption Standard is described in the US Government Federal
29e444
 Information Processing Standards (FIPS) 46-3 published by the National
29e444
 Institute of Standards and Technology.  The DES has been very thoroughly