--- rsaref/doc/info.txt 2018/04/24 16:38:24 1.1.1.1 +++ rsaref/doc/info.txt 2018/04/24 16:38:56 1.1.1.2 @@ -1,24 +1,24 @@ - RSAREF(TM): A Cryptographic Toolkit + RSAREF(TM) 2.0: A Free Cryptographic Toolkit General Information RSA Laboratories - Revised March 25, 1994 + Revised March 26, 1996 - Version 2.0 - -This document copyright (C) 1994 RSA Laboratories, a division of RSA -Data Security, Inc. License is granted to reproduce, copy, post, or -distribute in any manner, provided this document is kept intact and -no modifications, deletions, or additions are made. +This document copyright (C) 1992,1994,1996 RSA Laboratories, a division +of RSA Data Security, Inc. License is granted to reproduce, copy, post, +or distribute in any manner, provided this document is kept intact +and no modifications, deletions, or additions are made. WHAT IS IT? -The name "RSAREF" means "RSA reference." RSA Laboratories intends -RSAREF to serve as a portable, educational, reference implementation -of cryptography. +RSAREF is a free, portable software developer's library of popular +encryption and authentication algorithms. The name "RSAREF" means +"RSA reference." RSA Laboratories intends RSAREF to serve as a free, +educational reference implementation of modern public- and secret-key +cryptography. -RSAREF supports the following algorithms: +RSAREF 2.0 supports the following algorithms: o RSA encryption and key generation, as defined by RSA Laboratories' Public-Key Cryptography Standards (PKCS) @@ -49,41 +49,75 @@ implementation. WHAT YOU CAN (AND CANNOT) DO WITH RSAREF -The RSAREF license agreement gives legal terms and conditions. Here's -the layman's interpretation, for information only and with no legal -weight: - - 1. You can use RSAREF for any purpose, as long as you follow - the interface described in the RSAREF documentation. You - can't sell RSAREF or provide a service of any type, where - you charge in any way. You can use RSAREF in a commercial - facility. - - For information on commercial licenses of RSAREF-compatible - products, please contact RSA Data Security. (Special - arrangements are available for educational institutions and - non-profit organizations.) - - 2. You can give others RSAREF and programs that interface to - RSAREF, under the same terms and conditions as your RSAREF - license. - - 3. You can modify RSAREF as required to port it to other - operating systems and compilers, or to improve its - performance, as long as you give a copy of the results to - RSA Laboratories. Other changes require written consent. - - 4. You can't send RSAREF outside the United States or Canada, or - give it to anyone who is not a U.S. or Canadian citizen and - doesn't have a U.S. "green card." (These are U.S. State and - Commerce Department requirements, because RSA and DES are - export-controlled technologies.) + 1. RSAREF is free for personal or corporate use under the + following conditions: + + o RSAREF, RSAREF applications, and services based on + RSAREF applications may not be sold. + + o You must give RSA the source code of any free RSAREF + application you plan to distribute or deploy within + your company. RSA will make these applications + available to the public, free of charge. + + 2. RSAREF applications and services based on RSAREF + applications may be sold under the following conditions: + + o You must sign and return the RSAREF Commercial License + Agreement to RSA (call RSA for a copy of this + agreement). Remember, RSAREF is an unsupported toolkit. + If you are building an application to sell, you should + consider using fully supported libraries like RSA's + BSAFE or TIPEM SDK's. + + 3. RSAREF applications and services based on RSAREF + applications may be "sharewared" under the following + conditions: + + o Shareware authors do not need to sign a separate + agreement with RSA, provided that their per-copy asking + price is less than $50 and total RSAREF application + revenue is less than $10,000 annually. Otherwise, + shareware authors must sign and return the RSAREF + Commercial License Agreement. + + 4. You must use the interface described in the RSAREF + documentation. + + o The published interface of RSAREF consists of those + procedures and data types listed in the files + "global.h" and "rsaref.h", as described in the RSAREF + library reference manual (the file "rsaref.txt"). If a + procedure is not documented in the library reference + manual, then it is not considered published, even if an + application could access it without modification to + RSAREF. + + o Furthermore, the published interface is understood as + the reasonable interpretation of the descriptions in + the library reference manual. Although it may well be + possible to perform other operations with procedures + listed in "rsaref.h" than what is described in + "rsaref.txt", only the intended operations (e.g., + Diffie-Hellman key agreement with the Diffie-Hellman + procedures) are considered to follow the published + interface. + + 5. You can modify RSAREF to port it to other platforms, or to + improve its performance, as long as you give a copy of the + resulting source code to RSA. Other changes to the RSAREF + code require written consent from RSA. + + 6. You can't send or transmit (or cause to be transmitted) + RSAREF outside the United States or Canada, or give it to + anyone who is not a U.S. or Canadian citizen or doesn't have + a "green card." HOW TO GET IT -To obtain RSAREF, read the RSAREF license agreement and return a copy -of the following paragraph by electronic mail to +To obtain RSAREF, read the license at the end of the note and return +a copy of the following paragraph by electronic mail to : I acknowledge that I have read the RSAREF Program License @@ -100,12 +134,11 @@ of the following paragraph by electronic any other communications between RSA Laboratories and me relating to the Program. -RSAREF is distributed by electronic mail in UNIX(TM) "uuencoded", -compressed TAR format. When you receive it, store the contents of the -message in a file, and run your operating system's "uudecode", -"uncompress" and TAR programs. For example, suppose you store the -contents of your message in the file 'contents'. You would run the -commands: +RSAREF is distributed by electronic mail in "uuencoded", compressed +TAR format. When you receive it, store the contents of the message in +a file, and run your operating system's "uudecode", "uncompress" and +TAR programs. For example, suppose you store the contents of your +message in the file 'contents'. You would run the commands: uudecode contents # produces rsaref.tar.Z uncompress rsaref.tar.Z # produces rsaref.tar @@ -122,7 +155,7 @@ subdirectories: rdemo demonstration programs and test scripts source source code and include files -RSAREF is also available via anonymous FTP to 'rsa.com'. Along with +RSAREF is also available via anonymous FTP to 'ftp.rsa.com'. Along with RSAREF you can get RIPEM, Mark Riordan's RSAREF-based privacy-enhanced mail application, and an Emacs command interface to RIPEM. See the file 'README' in the FTP directory 'rsaref' for more information. @@ -147,12 +180,12 @@ send your name, address, and telephone n PUBLIC-KEY CERTIFICATION -RSA Data Security offers public-key certification services conforming -to PEM standards. For more information, please send electronic mail -to . +Verisign offers public-key certification services conforming to PKCS +standards. For more information, please send electronic mail to +. -PKCS: PUBLIC-KEY CRYPTOGRAPHY STANDARDS +PKCS: THE PUBLIC-KEY CRYPTOGRAPHY STANDARDS To obtain copies of RSA Laboratories' Public-Key Cryptography Standards (PKCS), send electronic mail to . @@ -167,7 +200,7 @@ mail to . AUTHORS -RSAREF is written and maintained by RSA Laboratories with assistance +RSAREF was written by the staff of RSA Laboratories with assistance from RSA Data Security's software engineers. The DES code was written by Richard Outerbridge, with help from Phil Karn and Dan Hoey. Jim Hwang of Stanford wrote parts of the arithmetic code under contract @@ -194,7 +227,8 @@ Len Adleman, distinguished associate - P Taher Elgamal, senior associate - Ph.D., Stanford University; inventor of Elgamal public-key cryptosystem based on discrete - logarithms + logarithms; holder of three patents for data compression algorithms + and implementations. Martin Hellman, distinguished associate - Ph.D., Stanford University; professor of electrical engineering at Stanford University; @@ -219,7 +253,7 @@ Matt Robshaw, research scientist - Ph.D. of EUROCRYPT '91 organizing committee RSA Laboratories seeks the talents of other people as well. If you're -interested, please write or call. +interested, please write or call us. ADDRESSES @@ -229,7 +263,143 @@ RSA Laboratories RSA D Redwood City, CA 94065 Redwood City, CA 94065 (415) 595-7703 (415) 595-8782 -(415) 595-4126 (fax) (415) 595-1873 (fax) +e-mail: rsa-labs@rsa.com info@rsa.com + + +RSA LABORATORIES RSAREF 2.0 PROGRAM LICENSE AGREEMENT + +RSA LABORATORIES, A DIVISION OF RSA DATA SECURITY, INC. ("RSA") +GRANTS YOU A LICENSE AS FOLLOWS TO THE "RSAREF" PROGRAM: -PKCS, RSAREF and RSA Laboratories are trademarks of RSA Data -Security, Inc. All other company names and trademarks are not. +1. LICENSE. RSA grants you a non-exclusive, non-transferable, + perpetual (subject to the conditions of Section 8) license for + the "RSAREF" program (the "Program") and its associated + documentation, subject to all of the following terms and + conditions: + + a. to use the Program on any computer; + + b. to make copies of the Program for back-up purposes; + + c. to modify the Program in any manner for porting or + performance improvement purposes (subject to Section 2) or + to incorporate the Program into other computer programs for + your own personal or internal use, provided that you provide + RSA with a copy of any such modification or Application + Program by electronic mail, and grant RSA a perpetual, + royalty-free license to use and distribute such + modifications and Application Programs on the terms set + forth in this Agreement. + + d. to copy and distribute the Program and Application Programs + in accordance with the limitations set forth in Section 2. + +"Application Programs" are programs which incorporate all or any +portion of the Program in any form. The restrictions imposed on +Application Programs in this Agreement shall not apply to any +software which, through the mere aggregation on distribution media, +is co-located or stored with the Program. + +2. LIMITATIONS ON LICENSE. + + a. RSA owns the Program and its associated documentation and + all copyrights therein. You may only use, copy, modify and + distribute the Program as expressly provided for in this + Agreement. You must reproduce and include this Agreement, + RSA's copyright notices and disclaimer of warranty on any + copy and its associated documentation. The Program and any + Application programs must be distributed with their source + code. + + b. The Program may not be used directly for revenue-generating + purposes. You may not: + + (i) use the Program to provide services to others for which + you are compensated in any manner; + + (ii) license or otherwise distribute any Application Program + in any manner that generates income to you, including + without limitation any income on account of license + fees, royalties, maintenance fees and upgrade fees; and + + (iii) license or otherwise distribute any Application + Program without the express written acknowledgment of + the end user that the Program will not be used in + connection with any revenue-generating activity of the + end user. + + Nothing in this paragraph prohibits you from using the + Program or any Application Program solely for internal + purposes on the premises of a business which is engaged in + revenue-generating activities. + + c. The Program, if modified, must carry prominent notices + stating that changes have been made, and the dates of any + such changes. + + d. Prior permission from RSA in writing is required for any + modifications that access the Program through ways other + than the published Program interface or for modifications to + the Program interface. (See the "What is it? RSAREF Supports + the Following Algorithms" and "What You Can (and Cannot) Do + With RSAREF," paragraph 4, all incorporated herein by + reference, for details.) RSA will grant all reasonable + requests for permission to make such modifications. + +3. NO RSA OBLIGATION. You are solely responsible for all of your + costs and expenses incurred in connection with the distribution + of the Program or any Application Program hereunder, and RSA + shall have no liability, obligation or responsibility therefor. + RSA shall have no obligation to provide maintenance, support, + upgrades or new releases to you or to any distributee of the + Program or any Application Program. + +4. NO WARRANTY OF PERFORMANCE. THE PROGRAM AND ITS ASSOCIATED + DOCUMENTATION ARE LICENSED "AS IS" WITHOUT WARRANTY AS TO THEIR + PERFORMANCE, MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR + PURPOSE. THE ENTIRE RISK AS TO THE RESULTS AND PERFORMANCE OF + THE PROGRAM IS ASSUMED BY YOU AND YOUR DISTRIBUTEES. SHOULD THE + PROGRAM PROVE DEFECTIVE, YOU AND YOUR DISTRIBUTEES (AND NOT RSA) + ASSUME THE ENTIRE COST OF ALL NECESSARY SERVICING, REPAIR OR + CORRECTION. + +5. LIMITATION OF LIABILITY. EXCEPT AS EXPRESSLY PROVIDED FOR IN + SECTION 6 HEREINUNDER, NEITHER RSA NOR ANY OTHER PERSON WHO HAS + BEEN INVOLVED IN THE CREATION, PRODUCTION, OR DELIVERY OF THE + PROGRAM SHALL BE LIABLE TO YOU OR TO ANY OTHER PERSON FOR ANY + DIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES, EVEN IF RSA HAS BEEN + ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. + +6. Nothing in this agreement shall be construed as a representation + or warranty against infringement of any third party rights based + on use of the program. + +7. RSAREF is a non-commercial publication of cryptographic + techniques. Portions of RSAREF have been published in the + International Security Handbook and the August 1992 issue of Dr. + Dobb's Journal. Privacy applications developed with RSAREF may be + subject to export controls. If you are located in the United + States and develop such applications, you are advised to consult + with the State Department's Office of Defense Trade Controls. + +8. TERM. The license granted hereunder is effective until + terminated. You may terminate it at any time by destroying the + Program and its associated documentation. The termination of your + license will not result in the termination of the licenses of any + distributees who have received rights to the Program through you + so long as they are in compliance with the provisions of this + license. + +9. GENERAL + + a. This Agreement shall be governed by the laws of the State of + California. + + b. Address all correspondence regarding this license to RSA's + electronic mail address , or + to + + RSA Laboratories + ATTN: RSAREF Administrator + 100 Marine Parkway, Suite 500 + Redwood City, CA 94065