There has been a whole lot of confusing info floating around here.
Let me try to straighten this out.

1. If you are using CVSup in checkout mode, you don't have a
problem.  Go away and don't read any more of this. :-)

2. If in the past you have been getting your crypto files from the US
or Canada, you don't have a problem.  Go away and don't read any more
of this.

3. If you are running a CVSup mirror site, you don't have a problem.
Go away and don't read any more of this.

4. If you use CVSup to fetch the "*,v" files and then use the "cvs"
command to check out your source tree, then you need to delete the
*checked out sources* in these trees:

    src/crypto
    src/eBones
    src/secure
    src/sys/crypto

Then check out these sources again using the "cvs" command.  Do NOT
delete your "*,v" files -- they are perfectly fine.

5. If you are using CTM to receive the "*,v" files and then using
the "cvs" command to check out your source tree, then I don't know
whether you need to delete your ",v" files and replace them or not.
Hopefully Mark will clarify this if he hasn't already done so.  But
you definitely DO need to delete your *checked out sources* in these
trees:

    src/crypto
    src/eBones
    src/secure
    src/sys/crypto

Then check out these sources again using the "cvs" command.

John
-- 
  John Polstra                                               jdp@polstra.com
  John D. Polstra & Co., Inc.                        Seattle, Washington USA
  "Disappointment is a good sign of basic intelligence."  -- Chögyam Trungpa