>> We are going to use Netfilter/iptables in a product. In order to obtain an export code, I need to document whether these components implement any kind of encryption - so my questions are: > >I hope that as part of the process of considering ANY third party code >in your products, a code review would be done to explore security[...] And to answer the question: If there was cryptography, then netfilter would use the Linux CryptoAPI so we do not have two crypto engines all over the place in the kernel. POMng also has a XOR target - dunno if you can consider this encryption in the sense of the US laws. Jan Engelhardt -- | Alphagate Systems, http://alphagate.hopto.org/