At 02:22 PM 4/24/96 -0700, Wei Dai <weidai@eskimo.com> wrote:
On Wed, 24 Apr 1996, Hal wrote: You can do signatures with Rabin too. I have a version of it in Crypto++ 2.0. It's been out for a while and RSA hasn't bothered me about it. Does anyone want to explain why, given the alternatives, people continue to use RSA and pay for it?
Sure. Because 1) it's a good algorithm for the job, 2) we've learned it, and have a PGP base behind our inertia, 3) The legalities of RSA are well-defined, 4) the Stanford patents mostly run out in 1997, unless Roger's suit succeeds first, 5) the price of RSA is fairly low, once free RSAREF came out 6) the price of licensing Cylink patents is high and/or unpredictable # Thanks; Bill # Bill Stewart, stewarts@ix.netcom.com, +1-415-442-2215