base-system@gentoo.org Gentoo Base System Support assembly hand optimized crypto functions (i.e. faster run time) Disable/Restrict EC algorithms (as they seem to be patented) -- note: changes the ABI Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers) Support for the old/insecure SSLv2 protocol -- note: not required for TLS/https Support for the old/insecure SSLv3 protocol -- note: not required for TLS/https Enable support for discouraged TLS compression Enable the Heartbeat Extension in TLS and DTLS Build support for SSL/TLS ciphers that are considered "weak" cpe:/a:openssl:openssl openssl/openssl