Re: New Crypto Application

17 Dec 2003

      -----BEGIN PGP SIGNED MESSAGE-----

At 08:10 07/28/97 -0700, Bill Stewart <stewarts@ix.netcom.com> wrote:
...
At 03:24 PM 7/27/97 -0600, Guillotine <guill@xmission.com> wrote:
...
The encryption algorithm,
using a symmetrical is going to be as strong as legally allowed,
There are no legal restrictions on cryptography strength in the US;
only restrictions on what's exportable, and even then you need permission.
This triggered a thought that may have already been discussed, but I thought 
I'd throw it out anyway.  Since the export of cryptography = munitions, what 
happens if I write an application that's the "shell", and contract with a 
national and resident of a foreign country to write the crypto module.  I do 
not export the crypto technology other than sending them a printed book 
(which Phil Karn's filing determined was exportable as a non-munition).

I then retail the software as a 2-component system (distantly like PGP 2.6.3i 
could have been) on the web.  FTP the "shell" from my domestic site, and FTP 
the "crypto" from the foreign site.  Both install to make the seamless 
finished product.

Anyone seen anything in ITAR addressing such a hiring arrangement?

I'm not planning it, just spewing hypotheticals that tickle my curiosity.
- --
Internet:  tgi@null.net                   Physical:  26 11'46"N  80 14'20"W
Web:       http://pobox.com/~tgi/         Amateur:   KE4QJN
PGP Key:   Available from key server: pgp-public-keys@pgp.mit.edu
           Fingerprint: E6 E1 25 DE 7C 6F 34 CD  E7 75 ED 21 7E 45 6E D7

"Our task of creating a socialist America can only succeed when those who
would resist us have been totally disarmed."  Sara Brady, Chairman, Handgun
Control, to Sen. Howard Metzanbaum, The National Educator, January 1994,
Page 3.

Re: New Crypto Application

Craig Strickland