version 1.39, 1999/10/01 17:57:06 |
version 1.40, 1999/10/01 18:17:15 |
|
|
<h2><font color=#e00000>Cryptography</font><hr></h2> |
<h2><font color=#e00000>Cryptography</font><hr></h2> |
|
|
<strong>Index</strong><br> |
<strong>Index</strong><br> |
<a href=#ssh>SSH soon built into OpenBSD base code</a>.<br> |
<a href=#ssh>SSH soon built in</a>.<br> |
<a href=#why>Why do we ship cryptography?</a>.<br> |
<a href=#why>Why do we ship cryptography?</a>.<br> |
<a href=#prng>Pseudo Random Number Generators</a> (PRNG): ARC4, ...<br> |
<a href=#prng>Pseudo Random Number Generators</a> (PRNG): ARC4, ...<br> |
<a href=#hash>Cryptographic Hash Functions</a>: MD5, SHA1, ...<br> |
<a href=#hash>Cryptographic Hash Functions</a>: MD5, SHA1, ...<br> |
|
|
|
|
<dl> |
<dl> |
<a name=ssh></a> |
<a name=ssh></a> |
<li><h3><font color=#e00000>SSH soon built into OpenBSD base code</font></h3><p> |
<li><h3><font color=#e00000>SSH soon built in</font></h3><p> |
|
|
What do most people do right after they install OpenBSD?<p> |
What is the first thing most people do after installing OpenBSD? |
They install Secure Shell (SSH) from the ports tree or the packages on |
They install Secure Shell (ssh) from the ports tree or the packages on |
the CD-ROM. Until now, that is.<p> |
the FTP sites. Until now, that is.<p> |
|
|
This is still very much a work in progress, but we found an innovative way |
This is still very much a work in progress, but we found an innovative way |
around the RSA patent. We are taking a free license release of SSH and |
around the RSA patent. We are taking a free license release of ssh and |
OpenBSD-ifying it.<p> |
OpenBSD-ifying it. We will get around the USA-based RSA patent by providing |
|
an easy way to automatically download and install a RSA-enabled package |
|
containing shared library versions of libcrypto and libss. These packages |
|
are based on OpenSSL. People living outside the USA can freely use the |
|
RSA patented code, while people inside the USA can freely use it for |
|
non-commercial purposes. It appears as if companies inside the USA can |
|
use the RSA libraries too, as long as RSA is not used in a profit generating |
|
role.<p> |
|
|
We get around the US-based RSA patent by letting end users |
But this way almost everyone will get ssh built-in.<p> |
selectively download the correct libssl file for their location (US resident |
|
or not).<p> |
|
|
|
<p> |
|
<a name=prng></a> |
<a name=prng></a> |
<li><h3><font color=#e00000>Pseudo Random Number Generators</font></h3><p> |
<li><h3><font color=#e00000>Pseudo Random Number Generators</font></h3><p> |
|
|