SRP secure remote password authentication

Tom Wu tom at arcot.com
Thu Sep 18 05:19:58 EST 2003


SRP is, if anything, the protocol with the *least* problematic patent 
license:

   http://www.ietf.org/ietf/IPR/WU-SRP

since royalty-free terms are offered.  If that isn't good enough for 
OpenSSH, then neither is DSA.

Tom

Markus Friedl wrote:
> SRP and similar protocols have patent problems.
> 
> are there any without?
> 
> On Wed, Sep 17, 2003 at 11:00:18AM +1000, Jeremy Nysen wrote:
> 
>>Are there any plans to include support for SRP or a similar zero-knowledge 
>>password protocol into OpenSSH?
>>
>>-- 
>>Jeremy
>>
>>_______________________________________________
>>openssh-unix-dev mailing list
>>openssh-unix-dev at mindrot.org
>>http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
> 
> 
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

-- 
Tom Wu
Chief Security Architect
Arcot Systems
(408) 969-6124




More information about the openssh-unix-dev mailing list