Re: new version for SRP-6/TLS available

2004-09-09 Thread Peter Sylvester
-- X-Sun-Data-Type: text X-Sun-Data-Description: text X-Sun-Data-Name: text X-Sun-Charset: us-ascii X-Sun-Content-Lines: 56 I thought SRP6 was patented. Isn't SRP6 patented? Yes, here an excerpt from http://srp.stanford.edu/licence.txt SRP is royalty-free worldwide for commercial

Re: new version for SRP-6/TLS available

2004-09-09 Thread Nils Larsch
Peter Sylvester wrote: I thought SRP6 was patented. Isn't SRP6 patented? Yes, here an excerpt from http://srp.stanford.edu/licence.txt SRP is royalty-free worldwide for commercial and non-commercial use. The SRP library has been carefully written not to depend on any encumbered algorithms,

new version for SRP-6/TLS available

2004-09-08 Thread Peter Sylvester
Hi, ho: I just made available the second beta release of our patch for OpenSSL 0.9.7d implemeting the SRP6 TLS protocol. In addition, a first beta release of a patch for mod_ssl allowing to use the new protocol in an Apache Web Server is provided. More info and downloads are available here:

Re: new version for SRP-6/TLS available

2004-09-08 Thread chevassu
Hi, I thought SRP6 was patented. Isn't SRP6 patented? Also, as pointed out by Steiner et al. [1] implementing SRP6 requires modifying the hello messages and therefore compatibility with already deployed openssl libraries is lost, isn't it? [1] Secure Password-Based Cipher Suite for TLS, M.