Re: [JXTA user] FW: BouncyCastle IDEA patent

["Mike [bondolo] Duigou" <bo...@jxta.org>]

JXTA JSE currently uses only a very small subset of Bouncy Castle which 
does not include the IDEA cipher algorithm. We are currently using

- PKCS#1 Certificate generation.
- PKCS#10 Certificate Signing Request generation. (optional)

Note that in order to use these functions it is necessary for us to 
install the bouncy castle JCE provider which means that applications 
could access the patented functions. If you know of appropriately 
licensed alternative code which is limited to only these functions we 
would be happy to convert as doing so would free us from export control 
review entirely.

Mike

Meeraj Kunnumpurath wrote:
> Hi,
> 
> Apparently bouncycastle uses a patented algorithm in their distribution.
> Could someone from the dev team kindly let me know whether the RI uses
> any of the patented code?
> 
> Thanks
> Meeraj
> 
> -----Original Message-----
> From: Jeremy Boynes [mailto:jboynes@apache.org] 
> Sent: Wednesday, February 21, 2007 8:39 PM
> To: tuscany-dev@ws.apache.org
> Cc: general@incubator.apache.org
> Subject: Re: BouncyCastle IDEA patent
> 
> On Feb 21, 2007, at 12:05 PM, Matt Hogstrom wrote:
> 
>> Regarding Bouncy Castle, IIRC they used to include the IDEA algorithm 
>> in their distribution and provided a one-off for Geronimo to use to 
>> bypass the patent issue.  Not sure if that is an issue or not for 
>> Tuscany but just a heads up.
> 
> Thanks for the heads up. We'll check with the jxta folks and see if they
> use/expose the patented code.
> 
> We should move this discussion to tuscany-dev and report back to the
> IPMC when its resolved.
> --
> Jeremy
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tuscany-dev-unsubscribe@ws.apache.org
> For additional commands, e-mail: tuscany-dev-help@ws.apache.org
> 
> 
> This message has been checked for all email viruses by MessageLabs.
> 
> 
> *****************************************************
> 
>     You can find us at www.voca.com
> 
> *****************************************************
> This communication is confidential and intended for 
> the exclusive use of the addressee only. You should 
> not disclose its contents to any other person.
> If you are not the intended recipient please notify 
> the sender named above immediately.
> 
> Registered in England, No 1023742,
> Registered Office: Voca Limited
> Drake House, Three Rivers Court,
> Homestead Road, Rickmansworth,
> Hertfordshire, WD3 1FX
> 
> 
> This message has been checked for all email viruses by MessageLabs.
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@jxta.org
> For additional commands, e-mail: user-help@jxta.org
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: tuscany-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: tuscany-dev-help@ws.apache.org

Re: [JXTA user] FW: BouncyCastle IDEA patent

[Jeremy Boynes <jb...@apache.org>]

On Feb 21, 2007, at 3:14 PM, Mike [bondolo] Duigou wrote:

> JXTA JSE currently uses only a very small subset of Bouncy Castle  
> which does not include the IDEA cipher algorithm. We are currently  
> using
>
> - PKCS#1 Certificate generation.
> - PKCS#10 Certificate Signing Request generation. (optional)
>
> Note that in order to use these functions it is necessary for us to  
> install the bouncy castle JCE provider which means that  
> applications could access the patented functions. If you know of  
> appropriately licensed alternative code which is limited to only  
> these functions we would be happy to convert as doing so would free  
> us from export control review entirely.

David Jencks pointed out that Geronimo had a similar issue and ended  
up duplicating that function into a separate module geronimo-util  
(allowing Geronimo to remove its dependency on Bouncy Castle).

Would that be an option for you?
--
Jeremy


---------------------------------------------------------------------
To unsubscribe, e-mail: tuscany-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: tuscany-dev-help@ws.apache.org