added a warning for the addition of new algorithms

diff --git a/lib/gnutls_algorithms.c b/lib/gnutls_algorithms.c
index f21288188ab5fa979936cedac7addd0bf0d50266..78ac1be9a74d7346150abc943331717430be739b 100644 (file)
--- a/lib/gnutls_algorithms.c
+++ b/lib/gnutls_algorithms.c
@@ -71,6 +71,11 @@ struct gnutls_cipher_entry {
 };
 typedef struct gnutls_cipher_entry gnutls_cipher_entry;
 
+/* Note that all algorithms are in CBC or STREAM modes. 
+ * Do not add any algorithms in other modes (like ECB).
+ * View first: "The order of encryption and authentication for
+ * protecting communications" by Hugo Krawczyk - CRYPTO 2001
+ */
 static const gnutls_cipher_entry algorithms[] = {
        GNUTLS_CIPHER_ENTRY(GNUTLS_3DES, 8, 24, 1, 8),
        GNUTLS_CIPHER_ENTRY(GNUTLS_RIJNDAEL, 16, 16, 1, 16),