[7014] in Kerberos
Re: kerberos security
daemon@ATHENA.MIT.EDU (Bill Sommerfeld)
Thu Apr 4 14:02:56 1996
To: "Donald T. Davis" <don@cam.ov.com>
Cc: Ranjeet Shetye <shetye@chaph.usc.edu>,
Brian Schimpf <schimpf@gradient.com>, kerberos@MIT.EDU
In-Reply-To: don's message of Thu, 04 Apr 1996 10:30:24 -0500.
<199604041530.KAA11796@gza-client1.cam.ov.com>
Date: Thu, 04 Apr 1996 13:34:50 -0500
From: Bill Sommerfeld <sommerfeld@apollo.hp.com>
-----BEGIN PGP SIGNED MESSAGE-----
content-type: text/plain; charset=us-ascii
ranjeet shetye wrote:
>> can a person outside the US sit down and legally code the DES**3 approach
>> into an ecryption program or has the mathematical proof also been patente
d?
mr. shetye,
u.s. nationals cannot legally write export-restricted
cryptographic code while travelling overseas. in fact,
even coordinating the overseas development of crypto
code is a possible violation of ITAR.
Of course, non-US nationals can and have implemented triple DES without
violating any laws in their own country. For instance, I believe that the
triple-DES implementation in the appendix of Schneier was implemented outside
the U.S.
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
iQCVAwUBMWQWQ1pj/0M1dMJ/AQGTyQP9Fc7qSJfbm3QVszcXdcrQo06ZcoQe33rO
M4KLybOl0ESuGXLIVLaAtxVipX7EDYlVwzCDOlvljdoIqPEFiByYgDVBu5usFYW6
GWUlP3tsu/9QUe92p5jtWp0r11cYqrzvErrcd74R1Sqrem4YzaGIO9CiQsjEwhe0
QrUdNJ2XaAI=
=oiFz
-----END PGP SIGNATURE-----
