>1. What should NO_RSA do?
Ideally, there should be two flags. Perhaps for
clarity, they should be
NO_RSA_CRYPTO
and
NO_RSA_DATATYPES
where
#if defined(NO_RSA_CRYPTO) && !defined(NO_RSA_DATATYPES)
#define NO_RSA_DATATYPES
#endif
I'd like to see NO_RSA_CRYPTO mean that nothing that
violates the RSA patent is included. This means the
crypto code -- essentially stuff in the EVP.
2. What does the RSA patent cover?
Check out
http://www.patents.ibm.com/details?pn=US04405829__&language=en
>Is it permissible to do RSA key
>generation and use RSA ASN.1 structures, for example >RSAPublicKey and
>RSAPrivateKey defined in PKCS#1?
I'm not a lawyer. My view is yes.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]