Re: U.S. Export Control Compliance

Bob Friesenhahn <[email protected]> Thu, 6 Jul 2006 17:06:31 -0500 (CDT)
Newsgroups gmane.network.vnc.ultravnc.general
Message-ID <[email protected]>
For feature requests and bug reports RC15 RC16. Please use the forum at http://forum.ultravnc.net/

> UltraVnc is encryption free, encryption is done with plugins.
> Use the plugins based on the MS crypto engine, thoose plugins do 
> encryption, but don't contain
> encryption code and i'm sure MS have a ECCN number.

This statement is not true.  Ultravnc *does* enclude encryption code 
which is not done with a plugin.  The source for this encryption code 
is in the rfb/d3des.c file, and is required in order to support VNC 
authentication.

The code does not quite implment DES.  The VNC inventors were really 
"smart" and made a minor source tweak so that the results are 
different than true DES.  The VNC protocol specification fails to 
mention this tweak.  Regardless, it did not take long for VNC crack 
tools to emerge since the source code was readily available (i.e. it 
was a bad idea).

Bob

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642