[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Sample/reference code of RFCs



markus schnalke asked:
> It's about the package `masqmail'. The upstream release includes an
> MD5 implementation (in src/md5). This MD5 code is the reference
> implementation code from RFC 1321 and RFC 2104.

See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=293932#50
which basically recommends libmd as a faster, freer replacement.

As I understand it, the RSADSIMD5M-DA licence does not allow
distribution of derivatives explicitly.  And the code's slower.

[...]
> But the code from RFC 2104 shows no copyright information at all. See
> http://www.ietf.org/rfc/rfc2104.txt
> (In the Appendix, page 8 and 9.)
> 
>     Can I include this code in Debian?

In the absence of permission, the default is no permission, so no.
Probably BCP 78 applies, but that's not enough for inclusion.  

> This question is important, because I couldn't find a public domain
> implementation of this function.

That's a shame but I don't know hmac_md5 myself.  Is there a free
software (rather than PD) implementation?  There appear to be several
HMAC-MD5 implementations in debian already, including libmhash2, but
they don't look like drop-in replacements.

> P.S.
> I'm off-list, please CC me.

Done.

Hope that helps,
-- 
MJR/slef
My Opinion Only: see http://people.debian.org/~mjr/
Please follow http://www.uk.debian.org/MailingLists/#codeofconduct


Reply to: