Bill - The technology that we export as part of RPK InvisiMail, is world-class strong crypto. Key size options are 607 bits and 1279. The math behind the system is based on the same as that of D-H. There is no snake oil. There was no intentional or unintentional attempt to mislead any government authority. We also did not request an export license, because there is no need to do so in New Zealand as long as the export is by means of the Internet. Peter G. knows this as well. The story may be different for physical export on disk, disc or tape, although we cannot concur with Peter's personal experience. Our experience is that we get pretty good treatment from the NZ authorities. We also may use a different approach. I have often heard that you can often get a better response when using honey than vinegar. Therein may explain differences in our respective experiences. I have personally met with the Minister of Trade for New Zealand. His views and those of his staff seemed to be acceptable to us and have not imposed any undue restrictions of our business or our ability to operate. Jack Oswald President and CEO RPK Fast Public Key Encryption RPK New Zealand Ltd. 4750 Capitola Road Capitola, CA 95010 joswald@rpkusa.com www.rpk.co.nz www.InvisiMail.com +1 408.479.7874 phone +1 408.479.1409 fax +1 800.475.4509 pager -----Original Message----- From: Bill Stewart [SMTP:bill.stewart@pobox.com] Sent: Sunday, January 25, 1998 5:44 PM To: RPK New Zealand Ltd; cypherpunks@cyberpass.net Cc: scataldi@earthlink.net Subject: Re: Announcement: RPK InvisiMail released on 12 Jan, 1998 I was amused to receive two mail messages back-to-back, one from Peter Gutmann talking about New Zealand having one of the strictest formal export controls in the world, and one from RPK New Zealand talking about how their encryption product is not export-controlled because it's from NZ, not the US, and how their RPK Fast Public Key Encryptonite(tm) Engine is the strongest crypto in the world. Either they haven't bothered asking for export permission, or they asked in such a way that the export bureaucrats didn't notice it was crypto and regulated by their crypto export preventers, or their crypto somehow falls through the cracks, e.g. by using an algorithm with public keys shorter than 512 bits (works for ECC, not RSA) and private keys shorter than 40 bits (or 41 on a good day), or perhaps passes the "snake oil test" for export permission. I suppose it's possible that the NZ Export Bureaucrats have lightened up since Peter's last dealings with them, but it's not likely.
--------------- The mail, referencing www.invisimail.com RPK New Zealand Ltd. in a joint venture with Virtually Online Ltd. has released RPK InvisiMail, a standards-based e-mail security application for use with Internet mail software (SMTP/POP3). The product offers the strongest encryption available anywhere in the world. Since it was built outside the United States, it is also available all over the world with strong encryption. RPK InvisiMail is also the easiest product of its type to setup and use which makes it quite unique.
========= From Peter Gutmann's web page This policy has resulted in New Zealand enjoying the dubious distinction of having the strictest export controls on earth, with everything ranging from crypto hardware down to software, library books, computer magazines, and journals being restricted from export. It's not even possible for a university to publish academic research without prior permission from a government agency, and the requirements for obtaining this permission are structured to ensure that they can never be fulfilled. You can find the information on: http://www.cs.auckland.ac.nz/~pgut001/policy/ ============================== Thanks! Bill Bill Stewart, bill.stewart@pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639