## About This Content

May 11, 2006

### License

The Eclipse Foundation makes available all content in this plug-in ("Content"). Unless otherwise indicated below, the Content is provided to you under the terms and conditions of the Eclipse Public License Version 1.0 ("EPL"). A copy of the EPL is available at http://www.eclipse.org/legal/epl-v10.html. For purposes of the EPL, "Program" will mean the Content.

If you did not receive this Content directly from the Eclipse Foundation, the Content is being redistributed by another party ("Redistributor") and different terms and conditions may apply to your use of any object code in the Content. Check the Redistributor's license that was provided with the Content. If no such license exists, contact the Redistributor. Unless otherwise indicated below, the terms and conditions of the EPL still apply to any source code in the Content and such source code may be obtained at http://www.eclipse.org.

### Third Party Content

The Content includes items that have been sourced from third parties as set out below. If you did not receive this Content directly from the Eclipse Foundation, the following is provided for informational purposes only, and you should look to the Redistributor’s license for terms and conditions of use.

#### The Java (TM) Ssh Applet

The following classes:

- Cipher
- Client
- ClientPacket
- KnownHosts
- Misc
- Packet
- Policy
- ServerPacket
- SSHMethod
- SSHPlugin
- SSHServerConnection

and the following files:

- messages.properties

are located in the package org.eclipse.team.internal.ccvs.ssh in the plug-in JAR and are based on "The Java SSh Applet" developed by Cedric Gourio. The Java Ssh Applet includes the following copyright notice which must be included in any redistribution:

> Copyright (c) 1998 Cedric Gourio
> (http://www.math.ucdavis.edu/~bill/java/ssh/)
> (javassh@france-mail.com)

> This program is FREE FOR COMMERCIAL AND NON-COMMERCIAL USE.
> You can freely modify the code.

> You should however include this copyright notice in any redistribution
> and please keep in touch with the author for any feedback.

The Blowfish Encryption Algorithm

The following classes in the package org.eclipse.team.internal.ccvs.ssh in the plug-in JAR are based on an algorithm developed by Bruce Schneier. The algorithm was originally published in a paper that is located at http://www.counterpane.com/bfsverlag.html. Your use of the Blowfish Encryption Algorithm in both source and binary code form contained in the plug-in is not subject to any additional terms and conditions:

- Blowfish

### Cryptography

Export Control

The plug-in contains encryption software. The country in which you are currently may have restrictions on the import, possession, and use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check the country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted.

Encryption Items

Details of the encryption software in this plug-in are provided to assist in obtaining relevant export control classification and approval. Cryptography in this plug-in has been classified as Export Commodity Control Number (ECCN) 5D002.c.1 by the U.S. Government Department of Commerce, Bureau of Export Administration and deemed eligible for export under License Exception Technology Software Unrestricted (TSU) for both object code and source code.

The plug-in contains an implementation of the Secure Shell (SSH) protocol that encrypts the network traffic (program code files in file versioning systems) between a Concurrent Versions System (CVS) server and a CVS client. Data is encrypted using the Blowfish algorithm which is a 64-bit symmetric cipher that uses a key varying in length from 32 bits to 448 bits. The RSA PKCS #1 v1.5 key exchange algorithm is used to authenticate and exchange keys with a minimum modulus size of 96 bits and a maximum modulus size theoretically unlimited since the implementation uses the java.math.BigInteger class which has a maximum positive integer range limited only by the available memory in the computer. In practice, the key length is defined by the CVS server with which communication is initiated.

The following Java classes contain encryption items (the plug-in may contain both binary and source code):

- org.eclipse.team.internal.ccvs.ssh.Blowfish
- org.eclipse.team.internal.ccvs.ssh.Cipher
- org.eclipse.team.internal.ccvs.ssh.Client
- org.eclipse.team.internal.ccvs.ssh.ClientPacket
- org.eclipse.team.internal.ccvs.ssh.Misc

Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries.