[929] in cryptography@c2.net mail archive
Re: PGP Export: No Big Deal?
daemon@ATHENA.MIT.EDU (Donald E. Eastlake 3rd)
Fri May 30 13:26:05 1997
Date: Fri, 30 May 1997 12:07:00 -0400 (EDT)
From: "Donald E. Eastlake 3rd" <dee@cybercash.com>
To: Phil Karn <karn@qualcomm.com>
Cc: cryptography@c2.net
In-Reply-To: <199705300514.WAA10841@servo.qualcomm.com>
As I recall, NSA more or less told the American Bankers Association in
writing that it would "never" permit the export of triple DES, when trying to
disuade them from selecting it as a standard. So 3DES has political
overtones that make any export approval specially hard. I know of other
cases that support this.
Donald
On Thu, 29 May 1997, Phil Karn wrote:
> Date: Thu, 29 May 1997 22:14:28 -0700 (PDT)
> From: Phil Karn <karn@qualcomm.com>
> To: andrew_loewenstern@il.us.swissbank.com
> Cc: cryptography@c2.net
> Subject: Re: PGP Export: No Big Deal?
>
> >Excuse me, but hasn't there always been a "foreign subsidiary" exemption
> >clause in the ITAR and now the EAR???
>
> No, though in certain cases they look more favorably toward granting licenses.
>
> A while back I applied for a license to export triple DES to a company
> office in Singapore for use in an encrypted IP tunnel back to the
> US. Our application was denied. We were later able to get permission
> to export a Network Systems Borderguard box that includes 128-bit IDEA
> (but not 3DES).
>
> Since PGP also includes IDEA, this new policy is consistent with their
> previous decision in our case. Ie., it doesn't really indicate much of
> a relaxation in practice. It also makes me wonder about IDEA...
>
> Since my company isn't on the approved list, I guess that means
> anybody in one of our overseas offices who wants PGP will have to FTP
> it from outside the US instead. How utterly inconvenient.
>
> Phil
>
>
=====================================================================
Donald E. Eastlake 3rd +1 508-287-4877(tel) dee@cybercash.com
318 Acton Street +1 508-371-7148(fax) dee@world.std.com
Carlisle, MA 01741 USA +1 703-620-4200(main office, Reston, VA)
http://www.cybercash.com http://www.eff.org/blueribbon.html
