Re: Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms

From	Simon Josefsson <simon@josefsson.org>
Newsgroups	linux.debian.devel
Subject	Re: Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms
Date	2025-07-24 11:40 +0200
Message-ID	<Lc0AF-2hWF-1@gated-at.bofh.it> (permalink)
References	(2 earlier) <LbFwd-22SJ-9@gated-at.bofh.it> <LbfV8-1LWq-5@gated-at.bofh.it> <LbPFg-29iF-7@gated-at.bofh.it> <LbPFg-29iF-5@gated-at.bofh.it> <LbZEB-2hkW-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Simon McVittie <smcv@debian.org> writes:

> On Wed, 23 Jul 2025 at 23:53:58 +0200, Simon Josefsson wrote:
>>Is it forbidden for packages to exist in unstable and/or experimental
>>only in Debian?
>
> It is allowed. firefox (the non -esr version) and wine-development are
> examples of packages that exist only in unstable (with a RC bug to
> stop them from migrating to testing), while libsdl3-mixer and openjk
> are examples of packages that exist only in experimental.

Thanks for confirming!  This aspect wasn't terribly clear to me. Is it
discussed in any policy document?

>>While liboqs is not intended for normal production use because of
>>certain properties, it is useful for its designated purposes of
>>experiments and testing.  I think we somehow conflate these two,
>>thinking that everything in a Debian stable release MUST be intended for
>>secure production use.
>
> Debian stable is exactly for production use

There are plenty of things in debian stable clearly marked as unsuitable
for critical use - most of the Go and Rust ecosystems, but many other
packages too.  Or am I missing something?

Maybe it is the definition of "production use" that is what is at heart
here.  Production use of software X for user A may be completely frown
upon for user B because they have different use-cases in mind that it
doesn't meet desirable properties.  I don't think unsuitability for one
use-case is motivation enough to ban a package from stable and/or
unstable.

/Simon

Thread

Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Hector Oron Martinez <zumbi@debian.org> - 2025-07-22 09:50 +0200
  Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Andreas Metzler <ametzler@bebt.de> - 2025-07-23 06:50 +0200
    Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Hector Oron <zumbi@debian.org> - 2025-07-23 13:10 +0200
      Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Andreas Metzler <ametzler@bebt.de> - 2025-07-23 18:40 +0200
  Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Simon Josefsson <simon@josefsson.org> - 2025-07-24 00:00 +0200
    Re: Bug#1109697: ITP: liboqs -- library for quantum-safe  cryptographic algorithms Simon McVittie <smcv@debian.org> - 2025-07-24 10:40 +0200
      Re: Bug#1109697: ITP: liboqs -- library for quantum-safe  cryptographic algorithms Chris Hofstaedtler <zeha@debian.org> - 2025-07-24 11:20 +0200
      Re: Bug#1109697: ITP: liboqs -- library for quantum-safe  cryptographic algorithms Simon Josefsson <simon@josefsson.org> - 2025-07-24 11:40 +0200
    Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Andreas Metzler <ametzler@bebt.de> - 2025-07-24 19:20 +0200
      Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Simon Josefsson <simon@josefsson.org> - 2025-07-25 10:20 +0200
        Re: Bug#1109697: ITP: liboqs -- library for quantum-safe  cryptographic algorithms Andreas Metzler <ametzler@bebt.de> - 2025-07-25 19:20 +0200
          Re: Bug#1109697: ITP: liboqs -- library for quantum-safe  cryptographic algorithms Simon Josefsson <simon@josefsson.org> - 2025-07-26 10:00 +0200
  Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Michael Stone <mstone@debian.org> - 2025-07-24 01:20 +0200
  Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Michael Stone <mstone@debian.org> - 2025-07-24 02:50 +0200
  Bug#1109697: ITP: liboqs -- library for quantum-safe cryptographic algorithms Michael Stone <mstone@debian.org> - 2025-07-24 03:40 +0200

csiph-web