[1337] in Kerberos
Re: DES and export
daemon@ATHENA.MIT.EDU (Joe Pato)
Tue Apr 9 23:31:53 1991
From: pato@apollo.com (Joe Pato)
Date: Tue, 9 Apr 91 17:27:22 EDT
To: nss1!cjr@uunet.UU.NET (Chris Riddick)
Cc: kerberos@ATHENA.MIT.EDU, cjr@uunet.UU.NET
In-Reply-To: nss1!cjr@uunet.UU.NET (Chris Riddick), tue, 9 apr 91 16:26:42
Let me clarify something since several readers have asked me about it.
First, any cryptographic product (H/W or S/W) to be exported MUST have
an export license from the Office of Munitions Control of the
Department of State.
This is not strictly true. Products that use cryptography solely for
authentication purposes may be classified as being controlled by the Commerce
Department rather than needing a Munitions License. In general it is wise to
obtain a characterization of your product from the State Department (read NSA)
before you attempt to go through Commerce.
The version of Kerberos V5 that is included in the OSF DCE has been modified to
be exportable under Commerce Department jurisdiction.
-- Joe Pato
Cooperative Computing Division
Hewlett-Packard Company
pato@apollo.hp.com
-------