About a project to make gnupg2 ISO/IEC 19790 compliant

keisuke.inoue at mizuho-ir.co.jp keisuke.inoue at mizuho-ir.co.jp
Fri Jan 29 14:08:21 CET 2010


gnupg-devel-bounces at gnupg.org wrote on 2010/01/29 21:48:44:

> On Fri, 29 Jan 2010 13:21, simon at josefsson.org said:
> 
> > Interesting, I hadn't noticed that.  I'll defer to Werner on this, but
> > personally I think it makes sense for FSF to look into this from a 
legal
> 
> Actually one of the reasons we avoided OAEP in the past were rumors of
> patent claims.  I can't remember the details.
> 
> We now have ECDSA in Libcrypt because it seems to be an innocent
> implementaion.  However, out of patent fears Redhat does not include the
> ECDSA in there distribution.
> 
> Definitely something we should investigate.


  I found a web page related to this issue.

  http://grouper.ieee.org/groups/1363/P1363/letters/UC.html

  Reading this page, I think the University of California will
be welcome if we contact them, because implemention of RSA-PSS in
GnuPG will surely be a contribution for "widespread use of the highest 
quality mechanisms for cryptography and computer security".

  I'm not sure which is the adequate organization to contact them,
GnuPG developer community, or FSF (as Mr. Simon refered) though...

Keisuke Inoue



More information about the Gnupg-devel mailing list