Thanks for your reply.
[2010-07-20 09:42] MJ Ray <[email protected]> > markus schnalke asked: > > It's about the package `masqmail'. The upstream release includes an > > MD5 implementation (in src/md5). This MD5 code is the reference > > implementation code from RFC 1321 and RFC 2104. > > See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=293932#50 > which basically recommends libmd as a faster, freer replacement. I use Solar Designer's implementation now, which is in the public domain. > As I understand it, the RSADSIMD5M-DA licence does not allow > distribution of derivatives explicitly. Thanks for clarification. > [...] > > But the code from RFC 2104 shows no copyright information at all. See > > http://www.ietf.org/rfc/rfc2104.txt > > (In the Appendix, page 8 and 9.) > > > > Can I include this code in Debian? > > In the absence of permission, the default is no permission, so no. > Probably BCP 78 applies, but that's not enough for inclusion. > > > This question is important, because I couldn't find a public domain > > implementation of this function. > > That's a shame but I don't know hmac_md5 myself. Is there a free > software (rather than PD) implementation? There appear to be several > HMAC-MD5 implementations in debian already, including libmhash2, but > they don't look like drop-in replacements. I wrote an own implementation now. Actually, the RFC (i.e. the hmac_md5 function) is pretty straight-forward to implement. It's about 40 lines of C code. Thanks for your help. meillo -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]

