Re: About ECC patent and OpenSSL ECC code

Bob Bell (rtbell) wrote: [...] (for instance Certicom has a patent on having an ECC public key in an X.509 cert signed using RSA) [...] This patent really can not hold water if challenged (if the content's actually what's described here). This is what x509 has been designed to allow, also prior

RE: About ECC patent and OpenSSL ECC code

that might be fine or it might be a very slippery slope to a serious legal hassle. Bob _ From: Anilkumar Bollineni [mailto:[EMAIL PROTECTED] Sent: Friday, 11 January, 2008 13:03 To: openssl-users@openssl.org; Bob Bell (rtbell) Subject: RE: About ECC patent and OpenSSL ECC code Hi B

RE: About ECC patent and OpenSSL ECC code

Hi Bob, I have received so many mails from open-ssl users about this issue. Really thanks for the information. After going through the mails and some documentation about the Certicom patents, I understand that Certicom has more patents in "efficient" implemenation of ECC and not in a way how w

Re: About ECC patent and OpenSSL ECC code

Prakash Kamath wrote: My opinion: 2 times 2 = 4 no matter what approach you take, and so no one can sue you to doing that Math. However, if someone comes up with a math logic (software, hardware, combo, whatever) that does the same operation in a superior way, then that is patentable. I person

Re: About ECC patent and OpenSSL ECC code

Larry Bugbee wrote: I'm seeing vendors beginning to support ECC, and a couple of CAs discussing and preparing their CPs. who? got names you can mention in public? Our challenge as developers is to understand and be ready. My point is that we've been in "get ready for ECC" mode since at le

Re: About ECC patent and OpenSSL ECC code

Hi there, On Thu, 10 Jan 2008, Rodney Thayer wrote: > As far as I'm concerned... Your analysis was very helpful. Thanks very much. -- 73, Ged. __ OpenSSL Project http://www.openssl.org User Sup

RE: About ECC patent and OpenSSL ECC code

om: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Larry Bugbee Sent: Thursday, January 10, 2008 9:41 PM To: openssl-users@openssl.org Subject: Re: About ECC patent and OpenSSL ECC code Perhaps, and I'm not disagreeing, but for the most part, the crypto libraries have had ECC su

Re: About ECC patent and OpenSSL ECC code

Perhaps, and I'm not disagreeing, but for the most part, the crypto libraries have had ECC support for some time. I'm seeing vendors beginning to support ECC, and a couple of CAs discussing and preparing their CPs. Couple all this with the NIST/NSA Suite B recommendation to go there, it i

Re: About ECC patent and OpenSSL ECC code

As far as I'm concerned, ECC isn't a legitimate public key algorithm for enterprise use at this time because you can't buy a cert from a CA listed in a major browser where the cert uses ECC. Also, those of use who went through the onerous and in the end counterproductive experience of licensing R

Re: About ECC patent and OpenSSL ECC code

There is no substitute for legal counsel, but Tom had a summary that you might be interested in... http://libtom.org/pages/toorcon8_ecc_tstdenis.pdf See slides 24-27. Larry On Jan 10, 2008, at 2:25 PM, Anilkumar Bollineni wrote: Thanks a lot for the responses. Bill, I agree with you that

RE: About ECC patent and OpenSSL ECC code

Thanks a lot for the responses. Bill, I agree with you that the use of ECC is really matters here, the area where Certicom holds ECC patents. One of our application with respect to ECC that are planning to use ECDSA (Elliptic Curve DSA) signature based certificate generation/verification, sig

RE: About ECC patent and OpenSSL ECC code

I would characterize the Certicom patents as falling into 3 main categories: 1) patents relating to the use of ECC in very specific application circumstances This represents the bulk of Certicom patents. For these patents you will have to do your own research as they are dependent on

RE: About ECC patent and OpenSSL ECC code

Please, do the same for my userid too. [EMAIL PROTECTED] Thanks, Mohammed Rahman From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 10, 2008 4:06 PM To: openssl-users@openssl.org Subject: Re: About ECC patent and OpenSSL ECC code

Re: About ECC patent and OpenSSL ECC code

Hi Please remove my from mailing list. Thanks Sanjay This e-mail (and any attachment) has been sent from a PC belonging to DSG Retail Limited (Registered No 504877) or another compa

Re: About ECC patent and OpenSSL ECC code

As a followup you might ask your lawyers to verify if the NSA license is applicable to you. It is my understanding that they may only be applicable when your product is running in a FIPS-140-2 verified mode. Meaning that you have to go through the FIPS-140-2 verification etc before it wou

RE: About ECC patent and OpenSSL ECC code

Anil - There are a lot of legal issues surrounding the use of Certicom patented ECC code. One of the things that happened a couple of IETF meetings ago was that Certicom signed a letter allowing the use of some of their patents for things like TLS. However, there are a number of legal requirement