On Fri, 9 Mar 2018 16:32:17 +0100, Florian Weimer wrote:
GnuTLS uses Nettle, but does not provide access to DES. You can use Nettle directly:
https://www.lysator.liu.se/~nisse/nettle/nettle.html#DES
OpenSSL will work as well, but as Nettle is a preexisting dependency, it's probably the right choice here.
They don't seem to be compatible.
Whereas Nettle is fully compatible with glibc's rpc/des_crypt.h API, it offers a completely different interface than encrypt(), which operates on arrays of 64 bytes for each 64-bit block of input.
The ciphertext returned by encrypt() differs compared with Nettle and des_crypt (and that's with the bit vector transformation from the man page).