[2717] in cryptography@c2.net mail archive
Re: FYI: I believe Microsoft has knowingly violated the export rules
daemon@ATHENA.MIT.EDU (Peter Gutmann)
Tue May 19 17:37:20 1998
From: pgut001@cs.auckland.ac.nz (Peter Gutmann)
To: cryptography@c2.net, rsalz@shore.net
Reply-To: pgut001@cs.auckland.ac.nz
X-Charge-To: pgut001
Date: Wed, 20 May 1998 09:19:56 (NZST)
>There is another part of the story. Microsoft has licensed much of its
>ActiveX technology (including MSRPC and SSPI) to SoftwareAG, a German software
>company that has modified it to run it to a number of non-Microsoft systems.
>SoftwareAG calls their version EntireX. According to "Essential Com" [ISBN
>0201634465], this work was done in Germany by German citizens. According to
>their Web pages (at www.sagus.com), EntireX -- including the security facility
>-- is available on OS/390, an IBM mainframe operating system. More questions:
>
> - Did Microsoft give actual cryptographic source, not just the
> harder-to-modify executables, to foreign nationals?
> - Does this mean that Microsoft gave technology to a foreign
> company that lets them sell full-privacy security software
> overseas, where IBM itself cannot? Software that competes
> with products offered by IBM and others?
> - Has Microsoft licensed this technology to anyone else?
Ahh, no. AFAIK Software AG are using crypto written in New Zealand and
Australia.
Peter.
