RSA released into the public domain

Ben Laurie ukcrypto at maillist.ox.ac.uk
Sat, 09 Sep 2000 11:53:19 +0100


Tim Hudson wrote:
> 
> According to Ben Laurie:
> > > b) RSASI are not a one-string company; our (primary access to RSA) library
> > > is multifunction and no, you can't use it free now as it is our product
> >
> > Yeah, well, OpenSSL does everything that does, and more, and mostly 10
> > times as fast, too. BTW, its RSADSI.
> 
>         Actually after the company renaming last year it is simply
> "RSA Security Inc" ... so RSADSI isn't correct any longer.

I stand corrected.

>         Ben, have you compared the performance of OpenSSL against the
> equivalent RSA Security Inc product which is RSA BSAFE SSL-C?
> 
>         i.e -  do you have any real data to back up this statement?
> 
>         I happen to be in a position where I do have access to information
> that completely contradicts your statement so it would be useful to
> understand the foundation on which you make this claim.

Hehe. I am, of course, referring to BSAFE, not BSAFE SSL-C, which, as
everyone knows, is based on the same code (i.e. SSLeay) as OpenSSL is,
and therefore probably runs at a similar speed (I say similar because
OpenSSL has been improved since then, but I have no idea what has
happened to BSAFE SSL-C - I'm curious - do you track what we do with
OpenSSL at all?).

Everyone I've had contact with that uses RSA stuff has used BSAFE and
not BSAFE SSL-C, so that's the only real data I've got. I couldn't find
any benchmarks, either.

BTW, I notice that RSA are talking about something called "MultiPrime" -
what's that, then?

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

Coming to ApacheCon Europe 2000? http://apachecon.com/