Re: Sample/reference code of RFCs

[markus schnalke <meillo@marmaro.de>]

Thanks for your reply.


[2010-07-20 09:42] MJ Ray <mjr@phonecoop.coop>
> markus schnalke asked:
> > It's about the package `masqmail'. The upstream release includes an
> > MD5 implementation (in src/md5). This MD5 code is the reference
> > implementation code from RFC 1321 and RFC 2104.
> 
> See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=293932#50
> which basically recommends libmd as a faster, freer replacement.

I use Solar Designer's implementation now, which is in the public
domain.

> As I understand it, the RSADSIMD5M-DA licence does not allow
> distribution of derivatives explicitly.

Thanks for clarification.


> [...]
> > But the code from RFC 2104 shows no copyright information at all. See
> > http://www.ietf.org/rfc/rfc2104.txt
> > (In the Appendix, page 8 and 9.)
> > 
> >     Can I include this code in Debian?
> 
> In the absence of permission, the default is no permission, so no.
> Probably BCP 78 applies, but that's not enough for inclusion.  
> 
> > This question is important, because I couldn't find a public domain
> > implementation of this function.
> 
> That's a shame but I don't know hmac_md5 myself.  Is there a free
> software (rather than PD) implementation?  There appear to be several
> HMAC-MD5 implementations in debian already, including libmhash2, but
> they don't look like drop-in replacements.

I wrote an own implementation now. Actually, the RFC (i.e. the
hmac_md5 function) is pretty straight-forward to implement. It's about
40 lines of C code.


Thanks for your help.


meillo