No clarification needed: NTRU is patented, with no "free for all" patent
grant. It is a complete non-starter for OpenBSD or OpenSSH.

On Tue, 26 May 2015, Douglas Ray wrote:

> Thanks William and Ertetlen for clarifying:
> 
> 
> On 25/05/15 10:09 PM, William Whyte wrote:
> > Hi Ertetlen,
> > 
> > The base license for NTRU is GPL v2 or higher. However, there's a
> > license to distribute NTRU under GPL alongside open source projects that
> > exist under other licenses: see details at
> > 
> > https://github.com/NTRUOpenSourceProject/ntru-crypto/blob/master/FOSS%20Exception.md
> 
> 1. I can't speak for the real developers of OpenBSD.
> (and I'm not advocating anything here, just trying to
> keep the issues clear).
> 
> 2. The "FOSS exception" clause above won't help with existing
> OpenBSD policy, insofar as I understand it here:
>       http://www.openbsd.org/policy.html
> [note section towards end on GPL under "Specific Cases"]
> 
> So NTRU doesn't seem likely.  It would require the project
> leaders / developers to find some irresistable attraction in
> NTRU, so great that they wanted to modify the licence policy.
> 
> 3. I am so out-of-touch I didn't realise new OpenBSD code is
> under a re-wording of an ISC licence - not the two-clause BSD -
> so OpenBSD may no longer comply with NTRU's "FOSS exception"
> clause.
> http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share/misc/license.template?rev=HEAD
> 
> cheers,
> Douglas
> 
> > Which NTRU ciphersuite were you implementing? We're in the process of
> > specifying a new "hybrid" ciphersuite that allows an NTRU key exchange
> > to be run in parallel to a selected "classical" ciphersuite, allowing
> > users to use a currently trusted algorithm with NTRU as an additional
> > layer of security; I attach the relevant (not yet distributed) Internet
> > Draft, we'd value your feedback.
> > 
> > Cheers,
> > 
> > William
> > 
> > 
> > 
> > 
> > 
> > On Sun, May 24, 2015 at 8:12 AM, ertetlen barmok
> > <ertetlenbar...@safe-mail.net <mailto:ertetlenbar...@safe-mail.net>> wrote:
> > 
> >     Hello,
> > 
> >     Is the NTRU source available via BSD licence?
> > 
> >     Thank you.
> > 
> >     -------- Original Message --------
> >     From: Douglas Ray <doug...@cpan.org <mailto:doug...@cpan.org>>
> >     To: ertetlen barmok <ertetlenbar...@safe-mail.net>
> >     Subject: Re: NTRU Open Source Project / Post-quantum era
> >     Date: Sun, 24 May 2015 20:32:29 +1000
> > 
> >      > to clarify
> >      >
> >      > On 24/05/15 1:57 AM, Mike Burns wrote:
> >      > > On 2015-05-23 05.24.30 -0400, ertetlen barmok wrote:
> >      > >> https://github.com/NTRUOpenSourceProject
> >      > >
> >      > >
> >     
> > https://github.com/NTRUOpenSourceProject/ntru-crypto/blob/master/LICENSE.md
> >      > >
> >      > > "NTRU cryptographic IP and reference software may be used and
> >     modified
> >      > > to the needs of the user as long as the user adheres to version
> >     two (2)
> >      > > or higher of the GPL License"
> >      > >
> >      > >> When will LibreSSL have ciphers for the Post-quantum era?
> >      > >
> >      > > When you submit the patch -- with the correct license.
> >      > >
> >      > >
> >      >
> >      > OpenBSD excludes GPL - it uses a BSD licence.
> >      >
> >      > Wikipedia claims NTRU is available under GPL or BSD licence.
> >      > This seems to be contradicted by the NTRU source quoted above.
> >      >
> >      > Is there another tree using BSD licencing?
> > 
> > 
> 
> 

Reply via email to