20th June, 2002
Eclipse.org makes available all content in this plug-in ("Content"). Unless otherwise indicated below, the Content is provided to you under the terms and conditions of the Common Public License Version 1.0 ("CPL"). A copy of the CPL is available at http://www.eclipse.org/legal/cpl-v10.html. For purposes of the CPL, "Program" will mean the Content.
If this Content is licensed to you under the terms and conditions of the CPL, any Contributions, as defined in the CPL, uploaded, submitted, or otherwise made available to Eclipse.org, members of Eclipse.org and/or the host of Eclipse.org web site, by you that relate to such Content are provided under the terms and conditions of the CPL and can be made available to others under the terms of the CPL.
If this Content is licensed to you under license terms and conditions other than the CPL ("Other License"), any modifications, enhancements and/or other code and/or documentation ("Modifications") uploaded, submitted, or otherwise made available to Eclipse.org, members of Eclipse.org and/or the host of Eclipse.org, by you that relate to such Content are provided under terms and conditions of the Other License and can be made available to others under the terms of the Other License. In addition, with regard to Modifications for which you are the copyright holder, you are also providing the Modifications under the terms and conditions of the CPL and such Modifications can be made available to others under the terms of the CPL.
Export Control
The plug-in contains encryption software. The country in which you are currently may have restrictions on the import, possession, and use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check the country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted.
Encryption Items
Details of the encryption software in this plug-in are provided to assist in obtaining relevant export control classification and approval. Cryptography in this plug-in has been classified as Export Commodity Control Number (ECCN) 5D002.c.1 by the U.S. Government Department of Commerce, Bureau of Export Administration and deemed eligible for export under License Exception Technology Software Unrestricted (TSU) for object code and (cryptographic) source code, and License Exception ENC Retail for object code and no (cryptographic) source code.
The plug-in contains a proprietary routine that encrypts and decrypts information used to login to Version Control Management (VCM) repositories. This routine uses the SHA message digest algorithm implemented in a Java (TM) Runtime Environment (JRE), to obtain the digest of a user-supplied password. This digest is then used as a seed to generate a random number using the SHA-1 pseudo-random number generator (PRNG) implemented in the SecureRandom class in a JRE. That random number is then added to each byte in the data to be encrypted. When the data is to be decrypted, the same password will generate the same seed, which will generate the same random number, which is then subtracted from each byte in the encrypted data. Note that a JRE and therefore the aforementioned SHA message digest and SHA-1 PRNG code are not included with the plug-in.
The following Java classes contain encryption items (the plug-in may contain both binary and source code):