[Fedora-legal-list] UROnode licensing question

Jaroslav Skarvada jskarvad at redhat.com
Fri Nov 28 13:13:37 UTC 2014



----- Original Message -----
> On 07/16/2014 10:52 AM, Jaroslav Skarvada wrote:
> > * MD2C.C - RSA Data Security, Inc., MD2 message-digest algorithm
> >   */
> 
> > Is it Fedora Compatible? Does [1] apply to it?
> 
> Fedora software should not use the MD2 hashing algorithm for security
> reasons.  It's also *extremely* slow, making it a poor choice for any
> applications, basically.  Why does UROnode need it?
> 

It is application for amateur radio, so both security/speed is not an
issue here; users, licensed hams, are aware of it.

I will probably propose patch adding support for SHA-1 or anything else,
maybe HOTP/TOTP based sysop auth, but upstream will probably not drop the MD2
support due to backward compatibility

regards

Jaroslav


More information about the legal mailing list