I wrote: # All things are exportable as long as the keysize is kept under a # certain size, which is too small to be really secure. Bill Stewart writes:
That's not correct - you can only export crypto code from the US for which you have Permission,
Well, sure. I can only say so many obvious things in one message :}
and they'll only give you Permission if it's weak crypto or you agree to be Well-Behaved (e.g. US banks can export real DES for talking to other banks, but US banks can be subpoenaed and forced to hand over the plaintext.)
You didn't quote my next sentence, which was (according to http://www.hks.net/cpunks/cpunks-24/1417.html) # (Unless they're used for banking, or only # for authentication, or you're only taking it with you for personal use on # a trip, or....) -Lewis