You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shindig.apache.org by sg...@apache.org on 2008/03/21 09:41:49 UTC

svn commit: r639567 - /incubator/shindig/trunk/NOTICE

Author: sgala
Date: Fri Mar 21 01:41:44 2008
New Revision: 639567

URL: http://svn.apache.org/viewvc?rev=639567&view=rev
Log:
Add the notice about cryptographic material to NOTICE

SHINDIG has code to crypt arbitrary blobs, using the
javax.crypto infrastructure, and the use of it must
be reported and noticed.

Modified:
    incubator/shindig/trunk/NOTICE

Modified: incubator/shindig/trunk/NOTICE
URL: http://svn.apache.org/viewvc/incubator/shindig/trunk/NOTICE?rev=639567&r1=639566&r2=639567&view=diff
==============================================================================
--- incubator/shindig/trunk/NOTICE (original)
+++ incubator/shindig/trunk/NOTICE Fri Mar 21 01:41:44 2008
@@ -33,3 +33,33 @@
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
+-----------------------------------------------------------
+This distribution includes cryptographic software.  The country in
+which you currently reside may have restrictions on the import,
+possession, use, and/or re-export to another country, of
+encryption software.  BEFORE using any encryption software, please
+check your country's laws, regulations and policies concerning the
+import, possession, or use, and re-export of encryption software, to
+see if this is permitted.  See <http://www.wassenaar.org/> for more
+information.
+
+The U.S. Government Department of Commerce, Bureau of Industry and
+Security (BIS), has classified this software as Export Commodity
+Control Number (ECCN) 5D002.C.1, which includes information security
+software using or performing cryptographic functions with asymmetric
+algorithms.  The form and manner of this Apache Software Foundation
+distribution makes it eligible for export under the License Exception
+ENC Technology Software Unrestricted (TSU) exception (see the BIS
+Export Administration Regulations, Section 740.13) for both object
+code and source code.
+
+The following provides more details on the included cryptographic
+software:
+
+    Apache Shindig interfaces with the Java JCE APIs to provide digital
+    signing and encryption of messages using the AES, SHA1, and
+    HMAC-SHA1 standards.
+
+    Apache Shindig interfaces with the OAuth library
+    <http://http://code.google.com/p/oauth/> to provide digital signing
+    of messages according to the OAuth standard.