Re: SRP in OpenSSH draft protocol spec

[Tom Wu <tom%arcot.com@localhost>]

RJ Atkinson wrote:
> 
> At 00:21 02/04/01, Tom Holroyd wrote:
> 
> >SRP (Secure Remote Passwords, RFC2945) is a Diffie-Hellman style
> >zero-knowledge exchange which provides strong authentication of both
> >client and server.
> 
>         Does anyone know of any patents pending or patents
> granted that cover SRP ?  My possibly incorrect understanding
> is that SRP is patented or patent-pending.

RFC2945-style SRP authentication, which is what OpenSSH is using, is
royalty-free for commercial and non-commercial use worldwide.  See

  http://www.ietf.org/ietf/IPR/WU-SRP

for more information.

> Ran
> rja%inet.org@localhost

Tom
-- 
Tom Wu
Principal Software Engineer
Arcot Systems
(408) 969-6124