Projects / OpenSSH SRP patch

OpenSSH SRP patch

This patch adds Secure Remote Password (SRP) support to OpenSSH (portable version). The Stanford SRP distribution is not required, although this is compatible with that (it will use your existing SRP configuration files, if they exist).

Tags
Licenses

Recent releases

  •  31 Oct 2002 06:16

    Release Notes: This patch is relative to the OpenSSH-3.5p1 release.

    •  08 Oct 2002 07:25

      Release Notes: This patch is relative to the OpenSSH (portable) 20021007 snapshot.

      •  26 Sep 2002 20:50

        Release Notes: This patch is relative to OpenSSH (portable) 3.4p1. You no longer need to configure --with-srp, and this version supports privsep.

        •  26 Sep 2002 18:20

          Release Notes: This patch is relative to the OpenSSH (portable) snapshot 20020925. There are major changes in the SRP patch. You no longer need to configure --with-srp, and all conditionals have been removed. If you don't want SRP, don't apply the patch (you can still disable SRP through the config file). This release works in privsep mode.

          •  17 May 2002 05:13

            Release Notes: This patch is relative to the OpenSSH-3.2.2p1 release.

            Recent comments

            12 Jul 2001 14:49 darkonc

            Re: SRP patent


            > I suppose that may
            > change whenever they like. SRP is
            > nice, and I really hope this

            ...

            If their current license provide a perprtual irrevocable license for certain uses, then
            it would be hard for them to 'break' existing software in the future. This does not,
            however, prevent them from shifting licensing for the other 'more commercial' uses of
            the protocol.

            I guess we'll just have to wait, and see their license.

            25 Jun 2001 20:53 professortom

            Re: SRP patent
            This patent is one of the "good" kinds. That is,
            it is a defensive patent with a royalty free
            license designed so that nobody else can patent it
            and the algorithm will always be free
            for anyone to use. Note that the patent only
            provides this protection for RFC2945
            implementations, such as this patch. Tom Wu has
            made it explicitly clear on various public mailing
            lists that SRP (that is, RFC2945), is intended to
            be free and clear forever, and the patent
            reference given in the original comment makes that
            legal.

            08 Jun 2001 07:42 rainer

            SRP patent
            SRP is patent pending (or already patented), see the respective
            reference (http://availtech.stanford.edu/Scripts/otl.cgi/docket?docket=97-006) from Stanford University.
            And while they give
            a royalty-free license for some uses, I suppose that may
            change whenever they like. SRP is nice, and I really hope this
            will not end like the Unisys/GIF debacle ...

            17 May 2001 01:48 professortom

            Download directions
            This patch is being hosted on Tripod -- you must
            left click all links to download.

            Screenshot

            Project Spotlight

            OpenStack4j

            A Fluent OpenStack client API for Java.

            Screenshot

            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.