Subject: Re: OpenSSL import
To: None <tech-security@netbsd.org, netbsd-intl@sandelman.ottawa.on.ca>
From: Michael C. Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-security
Date: 06/29/1999 20:41:31
-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Thor" == Thor Lancelot Simon <tls@rek.tjls.com> writes:
    Thor> On Tue, Jun 29, 1999 at 06:22:51PM -0400, Michael C. Richardson
    Thor> wrote:
    >>  In particular, many of the things that are patented in the USA are
    >> not outside of the USA, and it is specifically the people outside of
    >> the USA that currently are most desirous of having cryptosrc-intl.
    >> 

    Thor> I'm glad to hear it.  This was hardly unnoticed in the debate.

    Thor> Current patents covering the IDEA algorithm (quoth ep.dips.org):

    Thor> EP0482154 (all European Patent Office nations) US5214703 (United
    Thor> States of America) JP5500121T (Japan) HK1003338 (? -- Hong Kong?)
    Thor> WO9118459 (Patent Cooperation Treaty)

    Thor> Note that in addition to the EPO patent, which covers most nations
    Thor> in Europe, the PCT patent essentially allows Ascom to have a patent
    Thor> issued in any industrialized nation for the cost of filing fees.

  Key words here "industrialized nation" --- huge growth in use of OpenSource
operating systems occurs in so the so called "third world". Does NetBSD want
a part of this? Or should we just let them use the Penguin?

    Thor> Will you please stop pretending this is a U.S. againt the world
    Thor> debate?  It's basically not okay to make commercial use of IDEA

  Show me someone on the list who is not US based who is complaining about
having the *source* code available.

    Thor> You should not have imported IDEA into the tree.  Regardless of how

  Since I am simply not interested in this debate anymore, I concede:

netbsd-[crypto-intl/dist/openssl/crypto] mcr 5 %rm -rf idea

  done. I have also removed md5 and sha1 since they are in libc.

  What else should I remove? From comments on the list, I take it that
rc2, rc4, rc5, rsa has to go. Anything else?

netbsd-[crypto-intl/dist/openssl/crypto] mcr 6 %ls -l
...
drwxrwxr-x   2 mcr  source   1024 Jun 29 19:47 x509v3/
drwxrwxr-x   2 mcr  source   1024 Jun 29 19:47 x509/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:47 txt_db/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:47 threads/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:47 stack/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:46 rsa/
drwxrwxr-x   3 mcr  source    512 Jun 29 19:46 ripemd/
drwxrwxr-x   3 mcr  source    512 Jun 29 19:42 rc5/
drwxrwxr-x   3 mcr  source    512 Jun 29 19:42 rc4/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:42 rc2/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:42 rand/
drwxrwxr-x   4 mcr  source    512 Jun 29 19:41 pkcs7/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 pkcs12/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 perlasm/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 pem/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 objects/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 mdc2/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 md2/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 lhash/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:40 hmac/
drwxrwxr-x   2 mcr  source   1536 Jun 29 19:39 evp/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:39 err/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:39 dsa/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:39 dh/
drwxrwxr-x   5 mcr  source   2048 Jun 29 19:38 des/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:38 conf/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:38 comp/
drwxrwxr-x   3 mcr  source    512 Jun 29 19:38 cast/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:38 buffer/
drwxrwxr-x   4 mcr  source   1024 Jun 29 19:38 bn/
drwxrwxr-x   2 mcr  source    512 Jun 29 19:38 bio/
drwxrwxr-x   3 mcr  source    512 Jun 29 19:38 bf/
drwxrwxr-x   2 mcr  source   2048 Jun 29 19:37 asn1/
drwxrwxr-x  20 mcr  source   1024 Jun 29 19:36 ../

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface

iQDVAwUBN3lnuXMJp3VWzPepAQH2mAX+LELtFScFlJbJz6cQ3i+8qw+qJHNC+X6W
8/WkddB3mqcBhMoLCKt3xZiQNFqsfFOa/qCHRWloLIndudjK6rs0Uo4sr7w4fba6
kliaA7hk0BjlROduDnngooBmCgUDwA0QHAi4EcNb6MdmidR+QOycgCwo7sb0Qwub
DVru3I126GbuwF1/cfZTWS3bwKg5QGJVvnP7i/IEK4ZQmq90YGaPXgmYLtgVn5JN
Q6GnUKKUs0CD4r/8i0N26q85zLMQ2aC9
=T2cY
-----END PGP SIGNATURE-----