US grants export license for PGP
http://www.news.com/News/Item/0,4,11048,00.html?ticker.ms.ie40 PGP crypto approved for export By Tim Clark and Alex Lash May 28, 1997, 7 p.m. PTThe U.S. government has granted an encryption export license to one of the biggest thorns in its side. Pretty Good Privacy says it has won approval to export strong encryption technology overseas. The license allows PGP to export technology up to 128 bits; the government's regular licenses only allow up to 56 bits. To date, the government has only approved 128-bit encryption exports for technology that protects financial transactions but PGP technology can encrypt any kind of digital communication. PGP was founded by cryptographer Phil Zimmermann. Zimmerman became something of a cause celebre when he posted his PGP technology on the Net in defiance of laws prohibiting international distribution of encryption technology. Zimmermann came close to going to jail before the government dropped its case against him. The company said tonight that it counts more than half of Fortune 100 companies use its email software. PGP still has another old foe to worry about. Encryption software giant RSA Data Security earlier this month filed a patent infringement lawsuit against PGP. The suit alleged that PGP is unlawfully using RSA technology licensed to Lemcom before its merger with PGP in 1996. PGP officials say RSA's claims are without merit. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred
I have a question. Does it mean that a person can take a diskette with PGP and PGP keys with him or her for an overseas trip? igor Lucky Green wrote:
http://www.news.com/News/Item/0,4,11048,00.html?ticker.ms.ie40
PGP crypto approved for export By Tim Clark and Alex Lash May 28, 1997, 7 p.m. PTThe U.S. government has granted an encryption export license to one of the biggest thorns in its side. Pretty Good Privacy says it has won approval to export strong encryption technology overseas. The license allows PGP to export technology up to 128 bits; the government's regular licenses only allow up to 56 bits. To date, the government has only approved 128-bit encryption exports for technology that protects financial transactions but PGP technology can encrypt any kind of digital communication. PGP was founded by cryptographer Phil Zimmermann. Zimmerman became something of a cause celebre when he posted his PGP technology on the Net in defiance of laws prohibiting international distribution of encryption technology. Zimmermann came close to going to jail before the government dropped its case against him. The company said tonight that it counts more than half of Fortune 100 companies use its email software. PGP still has another old foe to worry about. Encryption software giant RSA Data Security earlier this month filed a patent infringement lawsuit against PGP. The suit alleged that PGP is unlawfully using RSA technology licensed to Lemcom before its merger with PGP in 1996. PGP officials say RSA's claims are without merit.
-- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred
- Igor.
PGP crypto approved for export By Tim Clark and Alex Lash May 28, 1997, 7 p.m. PTThe U.S. government has granted an encryption export license to one of the biggest thorns in its side. Pretty Good Privacy says it has won approval to export strong encryption technology overseas. The license allows PGP to export technology up to 128 bits; the government's regular licenses only allow up to 56 bits. To date, the government has only approved 128-bit encryption exports for technology that protects financial transactions but PGP technology can encrypt any kind of digital communication.
Does this agreement have a GAK clause??? Even if it does not, with the new structure of PGP they are not going to be releasing source code for future products so it is likely they are hoping the average paeon who won`t reverse engineer the executable won`t realise they have zeroed 72 bits of the key <g>, or are using a reduced round variant of some strong cipher, to give the impression of strength. Datacomms Technologies data security Paul Bradley, Paul@fatmans.demon.co.uk Paul@crypto.uk.eu.org, Paul@cryptography.uk.eu.org Http://www.cryptography.home.ml.org/ Email for PGP public key, ID: FC76DA85 "Don`t forget to mount a scratch monkey"
Does this mean PGP now, or soon will, supports GAK/Key Recovery? Or is their something the article isn't saying? sorrin -- A picture tells a thousand words. Stego -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS/IT/S d--() s+: a-- C++++(++)$ ULS+++@ P++@ L+(++)$ E- W+(+++)$ N++$ !o K-? w++(+++)$ !O+>++ !M !V PS+(+++)@ PE(++)@ Y++$ PGP@ t+@ 5++@ X++>$ R+++>$ tv+@ b+@ DI+++>$ D+++@>$ G@ e++@>++++ h r* y+ ------END GEEK CODE BLOCK------
At 08:00 PM 5/28/97 -0700, Lucky Green wrote:
http://www.news.com/News/Item/0,4,11048,00.html?ticker.ms.ie40
PGP crypto approved for export
Alright, what's the catch? What kind of GAK does PGP have to stick in to get this approval? Encyphering minds want to know... Regards, -- Joey Grasty jgrasty@gate.net [home -- encryption, privacy, RKBA and other hopeless causes] "America is at that awkward stage. It is too late to work within the system, but too early to shoot the bastards." -- Claire Wolfe http://www.cyberpass.net/~winsock/ PGP (1536 bit) = 87 42 C9 FC 4F 8C 14 5D 31 A9 90 36 C4 F4 90 D9 PGP (768 bit) = A7 CC 31 E4 7E A3 36 13 93 F4 C9 06 89 51 F5 A7
Joey Grasty writes:
At 08:00 PM 5/28/97 -0700, Lucky Green wrote:
PGP crypto approved for export
Alright, what's the catch? What kind of GAK does PGP have to stick in to get this approval? Encyphering minds want to know...
The catch is that the license only extends to business use by subsidiaries of certain large US corporations. See PGPInc's press release at: http://www.pgp.com/newsroom/prel34.cgi It may be moot since some versions of PGP are available around the world, but this strikes me as patently unfair to all those companies not big enough to be on The List. On the other hand, maybe this is the beginning of the end. It seems to me that it will be difficult now to deny a similar license to Netscape or Microsoft or... -- Jeff (currently employed by a Real Company :-)
At 10:04 PM 5/28/97 -0500, Igor Chudov @ home wrote:
I have a question.
Does it mean that a person can take a diskette with PGP and PGP keys with him or her for an overseas trip?
That has been legal for some time now. You are supposed to file a report, though. --Lucky Green <shamrock@netcom.com> PGP encrypted mail preferred. Put a stake through the heart of DES! Join the quest at http://www.frii.com/~rcv/deschall.htm
Lucky Green wrote:
At 10:04 PM 5/28/97 -0500, Igor Chudov @ home wrote:
I have a question.
Does it mean that a person can take a diskette with PGP and PGP keys with him or her for an overseas trip?
That has been legal for some time now. You are supposed to file a report, though.
Interesting. What is that report? - Igor.
At 12:07 AM -0400 5/29/97, Steve wrote:
Does this mean PGP now, or soon will, supports GAK/Key Recovery? Or is their something the article isn't saying?
The grant PGP, Inc obtained from Commerce permits them to be the "exporter of record" to foreign offices of the companies listed on their application. The companies are the Fortune 100. As far as I know, this license has no requirement that PGP provide GAK. john noerenberg jwn2@qualcomm.com -------------------------------------------------------------------- "We need not to be left alone. We need to be really bothered once in a while." -- Ray Bradbury, Farhenheit 451, 1953 --------------------------------------------------------------------
participants (7)
-
ichudov＠algebra.com -
Jeff Barber -
Joey Grasty -
John W. Noerenberg -
Lucky Green -
Paul Bradley -
Steve