[erlang-questions] Non-free files in Erlang/OTP distribution?
Wed Jan 3 10:03:16 CET 2007
What about this statement from RSA? (the link below)
I think it clarifies that it is ok to redistribute derivative work
regarding the MD5 Message-Digest Algorithm.
It is written by:
"Linn, John" <>
February 19, 2000
and begin like this:
The purpose of this memo is to clarify the status of intellectual
property rights asserted by RSA Security Inc. ("RSA") in the MD2, MD4 and
MD5 message-digest algorithms, which are documented in RFC-1319, RFC-1320,
and RFC-1321 respectively.
Implementations of these message-digest algorithms, including
implementations derived from the reference C code in RFC-1319, RFC-1320, and
RFC-1321, may be made, used, and sold without license from RSA for any
It then continues, but I think the above statement is clear enough.
Note, the code distributed with Erlang/OTP is derivative work from the reference
implementation in RFC 1321.
On 1/2/07, Sergei Golovan <> wrote:
> I'm packaging Erlang/OTP for Debian GNU/Linux distribution. Today
> there was a bugreport
> (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405360) concerning a
> license of some files, included in the Erlang/OTP distribution.
> The suspicious files are
> They contain (modified) reference implementation of MD5 digest algorithm.
> The included licence states:
> * License is also granted to make and use derivative works provided
> * that such works are identified as "derived from the RSA Data
> * Security, Inc. MD5 Message-Digest Algorithm" in all material
> * mentioning or referencing the derived work.
> The problem is that the license doesn't permit redistribution of
> derived works explicitly. Therefore it is considered non-free.
> Can you tell me, how do you interpret the license. Don't you think
> that Erlang/OTP distribution can't contain these files, derived from
> RSA code?
> Best wishes!
> Sergei Golovan
> erlang-questions mailing list
More information about the erlang-questions