Skip to main content
aboutsummaryrefslogtreecommitdiffstats
blob: 19f3e9f44cb24f68bbb19f6abe2d00c41baa3c40 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN">
<html>
<head>
<title>About</title>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</head>
<body lang="EN-US">
<h2>About This Content</h2>

<p>April 8, 2005</p>	
<h3>License</h3>

<p>The Eclipse Foundation makes available all content in this plug-in (&quot;Content&quot;).  Unless otherwise indicated below, the Content is provided to you under the terms and conditions of the
Eclipse Public License Version 1.0 (&quot;EPL&quot;).  A copy of the EPL is available at <a href="http://www.eclipse.org/legal/epl-v10.html">http://www.eclipse.org/legal/epl-v10.html</a>.
For purposes of the EPL, &quot;Program&quot; will mean the Content.</p>

<p>If you did not receive this Content directly from the Eclipse Foundation, the Content is being redistributed by another party (&quot;Redistributor&quot;) and different terms and conditions may
apply to your use of any object code in the Content.  Check the Redistributor's license that was provided with the Content.  If no such license exists, contact the Redistributor.  Unless otherwise
indicated below, the terms and conditions of the EPL still apply to any source code in the Content.</p>

<h3>Third Party Content</h3>

<p>The Content includes items that have been sourced from third parties as follows:</p>

<p><b>The Java (TM) Ssh Applet</b></p>
<p>The following classes:</p>

<ul>
    <li>Cipher</li>
    <li>Client</li>
    <li>ClientPacket</li>
    <li>KnownHosts</li>
    <li>Misc</li>
    <li>Packet</li>
    <li>Policy</li>
    <li>ServerPacket</li>
    <li>SSHMethod</li>
    <li>SSHPlugin</li>
    <li>SSHServerConnection</li>
</ul>

<p>and the following files:</p>

<ul>
    <li>messages.properties</li>
</ul>

<p>are located in the package org.eclipse.team.internal.ccvs.ssh in the plug-in JAR and are based on &quot;The Java SSh Applet&quot; developed by Cedric Gourio.  The Java Ssh Applet includes the following copyright notice which must be included in any redistribution:</p>

<blockquote>
    Copyright (c) 1998 Cedric Gourio<br>
    (<a href="http://www.math.ucdavis.edu/~bill/java/ssh/">http://www.math.ucdavis.edu/~bill/java/ssh/</a>)<br>
    (<a href="mailto:javassh@france-mail.com">javassh@france-mail.com</a>)

	<p>This program is FREE FOR COMMERCIAL AND NON-COMMERCIAL USE.<br>
	You can freely modify the code.</p>

	<p>You should however include this copyright notice in any redistribution<br> 
	and please keep in touch with the author for any feedback.</p>
</blockquote>

<p><b>The Blowfish Encryption Algorithm</b></p>
<p>The following classes in the package org.eclipse.team.internal.ccvs.ssh in the plug-in JAR are based on an algorithm developed by Bruce Schneier.
The algorithm was originally published in a paper that is located at <a href="http://www.counterpane.com/bfsverlag.html">http://www.counterpane.com/bfsverlag.html</a>.
Your use of the Blowfish Encryption Algorithm in both source and binary code form contained in the plug-in is not subject to any
additional terms and conditions:</p>

<ul>
    <li>Blowfish</li>
</ul>

<h3>Cryptography</h3>

<p><b>Export Control</b></p>
<p>The plug-in contains encryption software.  The country in which you are currently may have restrictions on the import, possession,
and use, and/or re-export to another country, of encryption software.  BEFORE using any encryption software, please check the country's
laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this
is permitted.</p>

<p><b>Encryption Items</b></p>

<p>Details of the encryption software in this plug-in are provided to assist in obtaining relevant export control classification and approval.
Cryptography in this plug-in has been classified as Export Commodity Control Number (ECCN) 5D002.c.1 by the U.S. Government Department of Commerce,
Bureau of Export Administration and deemed eligible for export under License Exception Technology Software Unrestricted (TSU) for both object code
and source code.</p>

<p>The plug-in contains an implementation of the Secure Shell (SSH) protocol that encrypts the network traffic (program code files
in file versioning systems) between a Concurrent Versions System (CVS) server and a CVS client.  Data is encrypted using the Blowfish algorithm
which is a 64-bit symmetric cipher that uses a key varying in length from 32 bits to 448 bits.  The RSA PKCS #1 v1.5 key exchange algorithm is
used to authenticate and exchange keys with a minimum modulus size of 96 bits and a maximum modulus size theoretically unlimited since the
implementation uses the java.math.BigInteger class which has a maximum positive integer range limited only by the available memory in the computer.
In practice, the key length is defined by the CVS server with which communication is initiated.</p>

<p>The following Java classes contain encryption items (the plug-in may contain both binary and source code):</p>

<ul>
	<li>org.eclipse.team.internal.ccvs.ssh.Blowfish</li>
	<li>org.eclipse.team.internal.ccvs.ssh.Cipher</li>
	<li>org.eclipse.team.internal.ccvs.ssh.Client</li>
	<li>org.eclipse.team.internal.ccvs.ssh.ClientPacket</li>
	<li>org.eclipse.team.internal.ccvs.ssh.Misc</li>
</ul>		

<small>Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries.</small>

</body>
</html>

Back to the top