meanwhile provide a simple, patched version of 2.3 for all platforms that both offers fully-2.6-compatible ciphertext and 2.6-impersonating keys.

dave

Wouldn't it be better to have a patched version of 2.5? Wouldn't this remove the questions about legal use in the U.S.?