It wasn't/isn't the only ftp site in US that has fips181.txt available. There are other sites that still have the information. Besides I doubt that anyone would having problems finding sources of DES they are all over the net (in and out of US). Clearly ITAR fails so be happy. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - blatant statements tend to get flamed so I thought I should follow up a little.
What I mean is it clear that ITAR fails to stop the exporting of crypto (for the individual). We have seen many examples when code has already found its way outside the US, before it even becomes availiable to many machines in the US (PGP,RSAREF,...). Also *most* algorithms developed in the US are documented extensively in text that is also available outside (with conference proceedings, journals, etc), it is just a matter of writting the code. Clearly if ITAR was to work it would require text exports to be banned as well.
From what I see, ITAR is only slight inconvience to the non-US individual, whereas it is also a major thorn to US software developers that can't release single versions of software containing crypto, in that they have to have US and Rest-of-World versions, ala PGP (unless they develop the software outside of the US ?).
-- +---------------------+--------------------------------------------------+ | ____ ___ | Justin Lister ruf@cs.uow.edu.au | | | \\ /\ __\ | Center for Computer Security Research | | | |) / \_/ / |_ | Dept. Computer Science voice: 61-42-835-114 | | | _ \\ /| _/ | University of Wollongong fax: 61-42-214-329 | | |_/ \/ \_/ |_| (tm) | Computer Security a utopian dream... | | | LiNuX - the only justification for using iNTeL | +---------------------+--------------------------------------------------+