OpenSSH SRP patch
This patch adds Secure Remote Password (SRP) support to OpenSSH (portable version). The Stanford SRP distribution is not required, although this is compatible with that (it will use your existing SRP configuration files, if they exist).
| Tags | Communications Internet Security Cryptography |
|---|---|
| Licenses | BSD Original |
Recent releases
- 31 Oct 2002 01:16
Changes: This patch is relative to the OpenSSH-3.5p1 release.
- 08 Oct 2002 03:25
Changes: This patch is relative to the OpenSSH (portable) 20021007 snapshot.
- 26 Sep 2002 16:50
Changes: This patch is relative to OpenSSH (portable) 3.4p1. You no longer need to configure --with-srp, and this version supports privsep.
- 26 Sep 2002 14:20
Changes: This patch is relative to the OpenSSH (portable) snapshot 20020925. There are major changes in the SRP patch. You no longer need to configure --with-srp, and all conditionals have been removed. If you don't want SRP, don't apply the patch (you can still disable SRP through the config file). This release works in privsep mode.
- 17 May 2002 01:13
Changes: This patch is relative to the OpenSSH-3.2.2p1 release.
- All comments
Recent commentsRe: SRP patent
> I suppose that may
> change whenever they like. SRP is
> nice, and I really hope this
...
If their current license provide a perprtual irrevocable license for certain uses, then
it would be hard for them to 'break' existing software in the future. This does not,
however, prevent them from shifting licensing for the other 'more commercial' uses of
the protocol.
I guess we'll just have to wait, and see their license.
Re: SRP patent
This patent is one of the "good" kinds. That is,
it is a defensive patent with a royalty free
license designed so that nobody else can patent it
and the algorithm will always be free
for anyone to use. Note that the patent only
provides this protection for RFC2945
implementations, such as this patch. Tom Wu has
made it explicitly clear on various public mailing
lists that SRP (that is, RFC2945), is intended to
be free and clear forever, and the patent
reference given in the original comment makes that
legal.
SRP patent
SRP is patent pending (or already patented), see the respective
reference (http://availtech.stanford.edu/Scripts/otl.cgi/docket?docket=97-006) from Stanford University.
And while they give
a royalty-free license for some uses, I suppose that may
change whenever they like. SRP is nice, and I really hope this
will not end like the Unisys/GIF debacle ...
Download directions
This patch is being hosted on Tripod -- you must
left click all links to download.