On Thu, 14 Oct 2010, Paul Romero wrote:

> What you wrote is accurate. However, using OpenSSL is not practical for
> software that needs to be portable enough to work in embedded environments.
> It takes too much memory.

Perhaps, yes.

I work with embedded systems in my daily work. I've worked with embedded
systems with 4GB of memory (or more). I've also had embedded systems using
32MB of RAM and they've managed just fine to run openssh servers built with
OpenSSL so I think such a blanket statement is highly misleading.

If you have a very tiny embedded environment then yes, you need to make sure
you get everything done as small as possible so that you can cram everything
into the little thing. Then OpenSSL might give you some headaches.

In my experience, the LGPL license of gcrypt is usually what bothers people
more in embedded systems than the size of OpenSSL...

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html