Announcing the availablity of SPX v2.1 Beta Release. SPX is an authentication service that enhances the security in open networks by using public key technology. SPX is distributed via anonymous FTP from crl.dec.com (address 192.58.206.2). The following files can be obtained in the /pub/DEC/SPX directory. SPX.v2.*-beta.tar.Z - SPX sources (without crypto algorithm sources) SPX.v2.*-doc.tar.Z - SPX documentation SPX-README - SPX README notes kit-verifier.tar.Z - sources for kit verifier program SPX-FORMS - forms to obtain crypto algorithms Also, for DIGITAL internal distribution, the SPX kit can be ftp'd from crl, or copied from CRL::/pub/DEC/SPX. Recipients can be assured that they received a valid SPX kit from DIGITAL if the kit-verifier program returns the following checksum specified in the SPX-README file located on crl.dec.com in the /pub/DEC/SPX directory. kit's name checksum ---------- -------- SPX.v2.0-beta.tar.Z a6fd2657a35a9e6f1daf08b982bd4b40 SPX.v2.1-beta.tar.Z 47eec3e6b3d12bb071f99f938e1c0b6d SPX Beta Release Overview o This version of SPX is for Beta test only. o This software is supplied "as is" with no warranty of any kind, expressed or implied, for any purpose, including any warranty of fitness or merchantibility. DIGITAL assumes no responsibility for the use or reliability of this software, nor promises to provide any form of support for it on any basis. o Distribution of this software is authorized only if no profit or remuneration of any kind is received in exchange for such distribution. o This software produces public key authentication certificates bearing an expiration date established by DIGITAL and RSA Data Security, Inc. It may cease to generate certificates after the expiration date. Any modification of this software that changes or defeats the expiration date or its effect is unauthorized. o SPX distribution recipients can register users and use the rtools. o SPX is working towards providing a common API interface with Kerberos. Discussions refining this interface, in conjunction with MIT/Project Athena, are in progress at this time. Users should be cautious about writing applications to SPX's API. As the API evolves, SPX users will be made aware of any changes through the SPX distribution list. o We expect to offer a new SPX version with bug fixes, and comments after Beta test. o Comments on how to improve the usability of SPX are welcome from users. A SPX mailing list has been created for discussions related to the deployment of SPX public key based authentication service. The mailing list is intended to cover a wide range of issues including : o Issues related to deployment of SPX, including technical issues, deployment status, availability, etc. o Issues related to protocol extensions, API issues, clarification of details, unpublished changes, etc. Please send contributions to the list at "sphinx@crl.dec.com". Administrative requests, e.g., additions to or deletions from the list, should be sent to "sphinx-request@crl.dec.com". If you have questions or comments, please send them by e-mail to "sphinx-info@crl.dec.com" or mail them to : SPX Distribution Digital Equipment Corporation 295 Foster Street, LTN1-1/G08 Littleton, MA 01460 Fax: (508) 486-6014