On Thu, Sep 16, 1999 at 09:44:49AM +0200, Xaver Fischer wrote:

> Is there really a patent on rc4? I thought only rc5 and rc6 are protected by
> patents (rc6 is not in openssl)? 

There is no indiciation that RC4 is covered by a patent -- RSADSI
never claimed it were.

>> If I build OpenSSL as:
>> 
>> ./config no-rsa no-rc4
>> 
>> Then that removes all patented algorithims from OpenSSL doesn't it?

No, the correct line would be "./config no-rsa no-rc5 no-idea".
(You don't really want to exclude all *patented* algorithms -- DSA is
patented by the NSA or the NIST, but may be used royalty-free.)


>> Then building things like stunnel with this should produce a
>> "binary" or"product" that I can legally send to a collegue in the
>> USA to use?

For all I know, those colleagues in the US could build the binary
themselves without infringing the patents, as long as they exclude
those algorithms.

I'm not sure if stunnel supports DSA-based ciphersuites yet
(it would have to provide DH-parameters in its servers implementation,
which is absolutely necessary for DSA-based ciphers and strongly
recommended for RSA-base ciphers).
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to