[653] in WWW Security List Archive
Re: Re- Hierarchies and Webs of [trust]
daemon@ATHENA.MIT.EDU (Robert W. Shirey)
Thu Apr 27 23:37:23 1995
Date: Thu, 27 Apr 95 20:08:16 EDT
To: Paul Rarey <Paul.Rarey@Systems.DHL.COM>
From: shirey@mitre.org (Robert W. Shirey)
Cc: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
At 7:17 AM 4/27/95, Paul Rarey wrote:
>Is there some info (or experience?) somewhere regarding the exportability of
>RSA's licensed technology?
I GUESS THERE ARE ENOUGH NEW PEOPLE ON THIS LIST TO MAKE IT WORTH AGAIN
SENDING OUT STEVE CROCKER'S "CRIB SHEET" ON EXPORT CONTROLS. -ROB-
Regards, -Rob- Robert W. Shirey SHIREY@MITRE.ORG
tel 703.883.7210, sec 703.883.5749, fax 703.883.1397
Info. Security Div., The MITRE Corp., Mail Stop Z231
7525 Colshire Drive, McLean, Virginia 22102-3481 USA
-----------------------------------------------------
Summary of Export Rules for Products
Containing Cryptographic Functions
Stephen D. Crocker
July 26, 1992
For use within/by
Security Algorithm U.S. & Banks & All
Service Used Canada U.S. Subs Other
Integrity, RSA A C C
Signature &
Access Ctl DES A C C
Other A C C
Symmetric
Key RSA B F F
Management
DES B E E
Other B E E
Symmetric
Encryption RSA B G G
DES B D G
Other B F F
Symmetric
Key
A No restriction.
B No restriction. A label is recommend which warns that export of
the product requires a license.
C A license is required. A general Commerce Department commodity
license is available except for shipments to Eastern bloc
countries. Individual licenses are needed for shipment to Eastern
bloc countries and are generally granted.
D A State Department license is required and will generally be
granted.
E An export license is needed. Each application will be examined on
a case-by-case basis. For some products, a Commerce Department
commodity license may be available.
F An export license is required and is generally granted provided
the modulus does not exceed 512 bits.
G An export license is required and generally will NOT be granted.
