Re: Sample/reference code of RFCs
Thanks for your reply.
[2010-07-20 09:42] MJ Ray <email@example.com>
> markus schnalke asked:
> > It's about the package `masqmail'. The upstream release includes an
> > MD5 implementation (in src/md5). This MD5 code is the reference
> > implementation code from RFC 1321 and RFC 2104.
> See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=293932#50
> which basically recommends libmd as a faster, freer replacement.
I use Solar Designer's implementation now, which is in the public
> As I understand it, the RSADSIMD5M-DA licence does not allow
> distribution of derivatives explicitly.
Thanks for clarification.
> > But the code from RFC 2104 shows no copyright information at all. See
> > http://www.ietf.org/rfc/rfc2104.txt
> > (In the Appendix, page 8 and 9.)
> > Can I include this code in Debian?
> In the absence of permission, the default is no permission, so no.
> Probably BCP 78 applies, but that's not enough for inclusion.
> > This question is important, because I couldn't find a public domain
> > implementation of this function.
> That's a shame but I don't know hmac_md5 myself. Is there a free
> software (rather than PD) implementation? There appear to be several
> HMAC-MD5 implementations in debian already, including libmhash2, but
> they don't look like drop-in replacements.
I wrote an own implementation now. Actually, the RFC (i.e. the
hmac_md5 function) is pretty straight-forward to implement. It's about
40 lines of C code.
Thanks for your help.