[1337] in Kerberos

home help back first fref pref prev next nref lref last post

Re: DES and export

daemon@ATHENA.MIT.EDU (Joe Pato)
Tue Apr 9 23:31:53 1991

From: pato@apollo.com (Joe Pato)
Date: Tue, 9 Apr 91 17:27:22 EDT
To: nss1!cjr@uunet.UU.NET (Chris Riddick)
Cc: kerberos@ATHENA.MIT.EDU, cjr@uunet.UU.NET
In-Reply-To: nss1!cjr@uunet.UU.NET (Chris Riddick), tue, 9 apr 91 16:26:42

    Let me clarify something since several readers have asked me about it.
    
    First, any cryptographic product (H/W or S/W) to be exported MUST have
    an export license from the Office of Munitions Control of the
    Department of State.
    
This is not strictly true.  Products that use cryptography solely for
authentication purposes may be classified as being controlled by the Commerce
Department rather than needing a Munitions License.  In general it is wise to
obtain a characterization of your product from the State Department (read NSA)
before you attempt to go through Commerce.

The version of Kerberos V5 that is included in the OSF DCE has been modified to
be exportable under Commerce Department jurisdiction.

                    -- Joe Pato
                       Cooperative Computing Division
                       Hewlett-Packard Company
                       pato@apollo.hp.com

-------

home help back first fref pref prev next nref lref last post