Full Kerberos, with DES, *is* available outside the US. The US allows export of cryptographic *binaries* for authentication purposes. For example, it is possible to get DECathena, which contains Kerberos with DES, which is compatible with MIT Kerberos. It even contains libraries, but not the functions to encrypt data for privacy, just enough to create checksummed messages. Its just that the SOURCE code is not available, but it is fairly simple to generate an exportable binary suite. I doubt DH is exportable, since it is key exchange, which in general is not exportable. Jim, care to comment? Yes, there is a version of RSAREF w/ DH included (I have a beta-test version, although I haven't played with it a lot). I don't know when this will be released to the world. -derek