[9fans] crypto licensing

[9fans] crypto licensing

[don bailey]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok, so, after using google for the past hour and a half I've decided I
suck at using google. So who here can point me to information on
algorithm specific licenses? i.e. is the license required by rfc1312
still necessary for an MD5 implementation? What about DES, AES, RSA, ...?

I'm cryptographically challenge(/response)d. Huhuh.

Don
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGQ6RjyWX0NBMJYAcRAiL9AJ0dvyksmupf41n0xNhhUt0h4rDRPwCfXLjo
L3el440rpZ8XKSsdzosWaEA=
=sNwi
-----END PGP SIGNATURE-----

Re: [9fans] crypto licensing

[Devon H. O'Dell]

2007/5/10, don bailey <don.bailey@gmail.com>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Ok, so, after using google for the past hour and a half I've decided I
> suck at using google. So who here can point me to information on
> algorithm specific licenses? i.e. is the license required by rfc1312
> still necessary for an MD5 implementation? What about DES, AES, RSA, ...?
>
> I'm cryptographically challenge(/response)d. Huhuh.

Not sure what you mean. You can freely use MD5, SHA, DES, DES3,
Rijndael (AES), RSA, and even IDEA now (I believe the patent is gone)
without obtaining licenses from any entities.

--dho

> Don
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFGQ6RjyWX0NBMJYAcRAiL9AJ0dvyksmupf41n0xNhhUt0h4rDRPwCfXLjo
> L3el440rpZ8XKSsdzosWaEA=
> =sNwi
> -----END PGP SIGNATURE-----
>

Re: [9fans] crypto licensing

[don bailey]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>> Not sure what you mean. You can freely use MD5, SHA, DES, DES3,
>> Rijndael (AES), RSA, and even IDEA now (I believe the patent is gone)
>> without obtaining licenses from any entities.
> 

Right, that's what I understand but I can't *prove* it. Are there places
  online where I can find a verified current status for algorithm
specific licenses? Like, is there someplace that RSADSI says "yes, we've
let go of MD5 and RSA for public use."?

Any help or advice is appreciated. I'm a bit lost when it comes to
legalese.

Don

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGQ6iXyWX0NBMJYAcRAgUkAJ9nyFc0cLoN7GgSlxPngE7y55EesgCfaekG
BoA5nuXlhc8ZFd+dMYyhidk=
=Ev1I
-----END PGP SIGNATURE-----

Re: [9fans] crypto licensing

[Devon H. O'Dell]

2007/5/10, don bailey <don.bailey@gmail.com>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> >> Not sure what you mean. You can freely use MD5, SHA, DES, DES3,
> >> Rijndael (AES), RSA, and even IDEA now (I believe the patent is gone)
> >> without obtaining licenses from any entities.
> >
>
> Right, that's what I understand but I can't *prove* it. Are there places
>   online where I can find a verified current status for algorithm
> specific licenses? Like, is there someplace that RSADSI says "yes, we've
> let go of MD5 and RSA for public use."?
>
> Any help or advice is appreciated. I'm a bit lost when it comes to
> legalese.

There is public domain code for MD5 and RSA in any case, and the
patents have expired on them. The USPTO would have more information on
the patents, and I know NIST has information about other ones. AES was
designed to be a fantastic, openly available cryptosystem.

--dho

> Don
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFGQ6iXyWX0NBMJYAcRAgUkAJ9nyFc0cLoN7GgSlxPngE7y55EesgCfaekG
> BoA5nuXlhc8ZFd+dMYyhidk=
> =Ev1I
> -----END PGP SIGNATURE-----
>

Re: [9fans] crypto licensing

[Lyndon Nerenberg]

> Right, that's what I understand but I can't *prove* it. Are there places
>  online where I can find a verified current status for algorithm
> specific licenses? Like, is there someplace that RSADSI says "yes, we've
> let go of MD5 and RSA for public use."?

RSA was restricted by patent, since expired. The top item when I Google 
"rsa patent" is a CNN story about RSA corp releasing the patent.

Similarly, a Google search on "cryptography idea patent" returns a first 
hit on Wikipedia that lists the US patent number (5,214,703) along with a 
note that the patents expire in the 2010-11 time-frame.

You get the idea ...  You need to track down the relevant patent numbers, 
then see when they expire(d).

--lyndon

   I think 3B2 code deserves its own place in hell.  Poring over the
   ESS#5 code, someone found that there were lots of strcmp(p, "f(")
   == 0 checks (I may have gotten the exact string wrong but it's
   close).  It took us a while to figure out why.  Apparently, location
   0 on the 3b had the 3 bytes 'f' '(' '\0', someone noticed that when
   programs blew up they were pointing to "f(", and the worlds most
   amazing kludge for detecting nil pointers was born.

   			-- Dave Presotto