blob: b229fcdf6847f71e50ef9d4d0828b549719341e9 [file] [log] [blame]
Kevin Stevesd85bf4b2001-02-11 16:43:05 +00001This file is part of the OpenSSH software.
Damien Miller7294baa2000-09-30 14:40:39 +11002
Kevin Stevesd85bf4b2001-02-11 16:43:05 +00003The licences which components of this software fall under are as
4follows. First, we will summarize and say that all components
Damien Miller7294baa2000-09-30 14:40:39 +11005are under a BSD licence, or a licence more free than that.
6
7OpenSSH contains no GPL code.
8
91)
10 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
11 * All rights reserved
12 *
13 * As far as I am concerned, the code I have written for this software
14 * can be used freely for any purpose. Any derived versions of this
15 * software must be clearly marked as such, and if the derived work is
16 * incompatible with the protocol description in the RFC file, it must be
17 * called by a name other than "ssh" or "Secure Shell".
18
19 [Tatu continues]
20 * However, I am not implying to give any licenses to any patents or
21 * copyrights held by third parties, and the software includes parts that
22 * are not under my direct control. As far as I know, all included
23 * source code is used in accordance with the relevant license agreements
24 * and can be used freely for any purpose (the GNU license being the most
25 * restrictive); see below for details.
26
27 [However, none of that term is relevant at this point in time. All of
28 these restrictively licenced software components which he talks about
Ben Lindstrom033e4552001-09-18 05:36:27 +000029 have been removed from OpenSSH, i.e.,
Damien Miller7294baa2000-09-30 14:40:39 +110030
31 - RSA is no longer included, found in the OpenSSL library
Kevin Stevesd85bf4b2001-02-11 16:43:05 +000032 - IDEA is no longer included, its use is deprecated
Damien Miller7294baa2000-09-30 14:40:39 +110033 - DES is now external, in the OpenSSL library
34 - GMP is no longer used, and instead we call BN code from OpenSSL
35 - Zlib is now external, in a library
36 - The make-ssh-known-hosts script is no longer included
37 - TSS has been removed
38 - MD5 is now external, in the OpenSSL library
39 - RC4 support has been replaced with ARC4 support from OpenSSL
40 - Blowfish is now external, in the OpenSSL library
41
42 [The licence continues]
43
44 Note that any information and cryptographic algorithms used in this
45 software are publicly available on the Internet and at any major
46 bookstore, scientific library, and patent office worldwide. More
47 information can be found e.g. at "http://www.cs.hut.fi/crypto".
48
49 The legal status of this program is some combination of all these
50 permissions and restrictions. Use only at your own responsibility.
51 You will be responsible for any legal consequences yourself; I am not
52 making any claims whether possessing or using this is legal or not in
53 your country, and I am not taking any responsibility on your behalf.
54
55
56 NO WARRANTY
57
58 BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
59 FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
60 OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
61 PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
62 OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
63 MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
64 TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
65 PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
66 REPAIR OR CORRECTION.
67
68 IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
69 WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
70 REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
71 INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
72 OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
73 TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
74 YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
75 PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
76 POSSIBILITY OF SUCH DAMAGES.
77
782)
79 The 32-bit CRC implementation in crc32.c is due to Gary S. Brown.
80 Comments in the file indicate it may be used for any purpose without
81 restrictions:
82
83 * COPYRIGHT (C) 1986 Gary S. Brown. You may use this program, or
84 * code or tables extracted from it, as desired without restriction.
85
863)
87 The 32-bit CRC compensation attack detector in deattack.c was
Ben Lindstrom033e4552001-09-18 05:36:27 +000088 contributed by CORE SDI S.A. under a BSD-style license.
Damien Miller7294baa2000-09-30 14:40:39 +110089
90 * Cryptographic attack detector for ssh - source code
91 *
92 * Copyright (c) 1998 CORE SDI S.A., Buenos Aires, Argentina.
93 *
94 * All rights reserved. Redistribution and use in source and binary
95 * forms, with or without modification, are permitted provided that
96 * this copyright notice is retained.
97 *
98 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
99 * WARRANTIES ARE DISCLAIMED. IN NO EVENT SHALL CORE SDI S.A. BE
100 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY OR
101 * CONSEQUENTIAL DAMAGES RESULTING FROM THE USE OR MISUSE OF THIS
102 * SOFTWARE.
103 *
104 * Ariel Futoransky <futo@core-sdi.com>
105 * <http://www.core-sdi.com>
Ben Lindstrom033e4552001-09-18 05:36:27 +0000106
Damien Miller7294baa2000-09-30 14:40:39 +11001074)
Ben Lindstrom033e4552001-09-18 05:36:27 +0000108 ssh-keygen was contributed by David Mazieres under a BSD-style
109 license.
110
111 * Copyright 1995, 1996 by David Mazieres <dm@lcs.mit.edu>.
112 *
113 * Modification and redistribution in source and binary forms is
114 * permitted provided that due credit is given to the author and the
115 * OpenBSD project by leaving this copyright notice intact.
116
1175)
Ben Lindstrombffa1cb2001-09-23 13:58:38 +0000118 The Rijndael implementation by Vincent Rijmen, Antoon Bosselaers
119 and Paulo Barreto is in the public domain and distributed
120 with the following license:
Ben Lindstrom033e4552001-09-18 05:36:27 +0000121
Ben Lindstrombffa1cb2001-09-23 13:58:38 +0000122 * @version 3.0 (December 2000)
123 *
124 * Optimised ANSI C code for the Rijndael cipher (now AES)
125 *
126 * @author Vincent Rijmen <vincent.rijmen@esat.kuleuven.ac.be>
127 * @author Antoon Bosselaers <antoon.bosselaers@esat.kuleuven.ac.be>
128 * @author Paulo Barreto <paulo.barreto@terra.com.br>
129 *
130 * This code is hereby placed in the public domain.
131 *
132 * THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
133 * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
134 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
135 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
136 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
137 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
138 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
139 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
140 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
141 * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
142 * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Ben Lindstrom033e4552001-09-18 05:36:27 +0000143
1446)
Damien Miller7294baa2000-09-30 14:40:39 +1100145 Remaining components of the software are provided under a standard
146 2-term BSD licence with the following names as copyright holders:
147
148 Markus Friedl
149 Theo de Raadt
150 Niels Provos
151 Dug Song
152 Aaron Campbell
Ben Lindstrom033e4552001-09-18 05:36:27 +0000153 Damien Miller
154 Kevin Steves
Damien Miller7294baa2000-09-30 14:40:39 +1100155
156 * Redistribution and use in source and binary forms, with or without
157 * modification, are permitted provided that the following conditions
158 * are met:
159 * 1. Redistributions of source code must retain the above copyright
160 * notice, this list of conditions and the following disclaimer.
161 * 2. Redistributions in binary form must reproduce the above copyright
162 * notice, this list of conditions and the following disclaimer in the
163 * documentation and/or other materials provided with the distribution.
164 *
165 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
166 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
167 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
168 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
169 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
170 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
171 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
172 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
173 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
174 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.