Re: Triple-DES controlled?
I have not heard of export licenses being granted for 3DES.
Didn't the ANSI financial committee just adopt 3DES (over NSA objections)? Presumably they consider the export situation solved/solvable. /r$
I have not heard of export licenses being granted for 3DES.
Didn't the ANSI financial committee just adopt 3DES (over NSA objections)? Presumably they consider the export situation solved/solvable.
There is absolutely no difficulty obtaining cryptographic aparatus outside the US. I had an entire distribution of PEM and X500 that was entirely written outside the US. DES is avaliable from many sources, there are many tripple DES products avaliable. It is not impossible to get export licenses, there have been several issued for DES for financial applications. If the US wants to be cut out of the market for financial services software thats up to them. Non US citizens can write crypto code as well, the British crypto tradition is far longer than the US one for example. Phill
Rich Salz writes:
I have not heard of export licenses being granted for 3DES.
Didn't the ANSI financial committee just adopt 3DES (over NSA objections)?
Yes.
Presumably they consider the export situation solved/solvable.
There is the trivial solution of buying outside the US. The hardware is actually better these days as the Germans and others have a worldwide market and the economies that brings. .pm
| Didn't the ANSI financial committee just adopt 3DES (over NSA | objections)? Presumably they consider the export situation solved/solvable. | /r$ As Perry points out, they consider it solved, albeit to the detriment of the US infosec industry. One would hope those companies are complaining loudly to their congressmen. Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume
participants (4)
-
Adam Shostack -
hallam＠w3.org -
Perry E. Metzger -
Rich Salz