Switch to BoringSSL.

net/http/des.cc

Index: net/http/des.cc
diff --git a/net/http/des.cc b/net/http/des.cc
index 79240cff72a6f2f0897879743fa774040e5483f2..a663b1a0c9f3160d30d79253d05c9d1d2c2cee2b 100644
--- a/net/http/des.cc
+++ b/net/http/des.cc
@@ -93,10 +93,10 @@ void DESEncrypt(const uint8* key, const uint8* src, uint8* hash) {
   crypto::EnsureOpenSSLInit();
 
   DES_key_schedule ks;
-  DES_set_key_unchecked(
-      reinterpret_cast<const_DES_cblock*>(const_cast<uint8*>(key)), &ks);
+  DES_set_key(
+      reinterpret_cast<const DES_cblock*>(key), &ks);
 
-  DES_ecb_encrypt(reinterpret_cast<const_DES_cblock*>(const_cast<uint8*>(src)),
+  DES_ecb_encrypt(reinterpret_cast<DES_cblock*>(const_cast<uint8*>(src)),

[davidben, 2014/07/16 21:58:54]

Why not
  reinterpret_cast<const DES_cblock*>(src)?

It looks like the first argument is const-correct anyway.

[agl, 2014/07/16 22:08:01]

Thanks, done.

                   reinterpret_cast<DES_cblock*>(hash), &ks, DES_ENCRYPT);
 }