Redistribution Policy for NIST NSRL RDS

The redistribution policy for the National Institute of Standards and Technology (NIST) National Software Reference Library (NSRL) Reference Data Set (RDS), also known as NIST Special Database 28, is as follows

Redistribution is free and encouraged. The CD may be duplicated or images of the CD suitable for CD writers may be created and distributed, among other methods. The NSRL RDS was developed at NIST by employees of the Federal Government in the course of their official duties. Pursuant to title 17 Section 105 of the United States Code. The RDS is not subject to copyright protection and is in the public domain.

Hash values of the distribution files that comprise the NSRL RDS are available on the website www.nsrl.nist.gov and the RDS is digitally signed. This provides traceability for the RDS file signatures, since it is possible to verify that that no changes have been made to its contents. Sample procedures for verifying the RDS follow.

NIST would appreciate acknowledgement if the RDS is used.

If modifications are made to the RDS, the resulting product must clearly state that it is not the official version of the RDS.

When you receive or create an NSRL RDS CD you are encouraged to verify the contents against the hash values on www.nsrl.nist.gov . Consumers receiving a NSRL RDS CD outside of the subscription distribution path have the responsibility to verify the contents. One benefit of the $90 per year subscription is physical traceability of the CD to NIST.