Subject: Re: cryptosrc-intl
To: Michael Richardson <mcr@sandelman.ottawa.on.ca>
From: Perry E. Metzger <perry@piermont.com>
List: tech-security
Date: 07/14/1999 16:20:16
Michael Richardson <mcr@sandelman.ottawa.on.ca> writes:
>   Well, I thought I yanked the code. I noticed yesterday that I seem to have
> not done so. I think my command silently failed. (due to -f)
>   I will yank things at 3pm Wednesday.
>   The list is:
> 	rc2  (trade secret of RSA)
> 	rc4  (trade secret of RSA)

No, that's not correct in either case. rc2 was openly published by
them, rc4 is almost impossible for them to claim trade secret
protection on given that is has been openly published in hundreds of
places. (They can probably sue the mysterious person who revealed it
in the first place, but they'd have to find that person first.)

OTOH, you *do* need to rename the rc4 routines to "arcfour" or some
similar thing because their trademark *is* valid. It would be useful
to keep "arcfour" in the library with that provisio.

> 	rc5  (patented in the US by RSA)
> 	rsa  (patented in the US)

These do need yanking, yes.

> 	dsa  (patent claimed by RSA in the US)

Lots of people are using it and it is highly unlikely the patent is
valid. I wouldn't worry about DSA.

> 	idea (patent claimed in a dozen European countries)

This does need removal, yes.

Perry