[4094] in Kerberos
Re: substitues to DES encryption
daemon@ATHENA.MIT.EDU (Bill Sommerfeld)
Wed Oct 26 16:01:31 1994
To: tasha@elvis.tgivan.wimsey.bc.ca
Cc: kerberos@MIT.EDU
In-Reply-To: Your message of "Thu, 20 Oct 1994 17:07:28 +0800"
Date: Wed, 26 Oct 1994 15:51:27 -0400
From: Bill Sommerfeld <sommerfeld@apollo.hp.com>
From: tasha@elvis.tgivan.wimsey.bc.ca (Anastacia Alfonso (Tasha))
Subject: substitues to DES encryption
Date: Thu, 20 Oct 1994 17:07:28 +0800
> Is it possible to replace the DES encryption used by Kerberos with
> another scheme which is available outside of the US? I'm trying to
> establish whether it is possible to run kerberos to give some degree of
> authentication/security to an application intended to run outside of the
> US and Canada.
Source code implementing DES is readily available outside the U.S; in
fact, when I'm looking for DES source code, I generally pick it up
from an FTP site outside the U.S. Anyone who tells you otherwise is
confused.
According to certain interpretations of the export control law, the
act of my telling you *how* to get DES from a non-US source
constitutes export of DES. I don't necessarily believe that this is
the case, but I have no desire to be a test case.
- Bill
