🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.security.ripem
Article #21

Re: RSAREF and RIPEM now available via anonymous FTP

#21
From: Ed Hamrick
Date: Thu, 07 Jan 1993 20:27
51 lines
3528 bytes
In article <1993Jan7.083740.6128@qualcomm.com> karn@servo.qualcomm.com (Phil Karn) writes:
>In article <1993Jan07.075317.15435@convex.com> hamrick@convex.com (Ed Hamrick) writes:
>>The attached information clearly states that publicly available software
>>is freely exportable.  There aren't ANY weasel words about types of software.
>
>Unfortunately, the information attached applies specifically to the
>Commerce Department's "Core List" controls, *not* to the State
>Department's ITARs (International Traffic in Arms Regulations). In
>theory, the Core List controls "dual use" technologies (stuff with
>both military and civilian uses, general purpose computer hardware
>being the classic example) while the ITARs are supposed to regulate
>only munitions (i.e., pure weapons, a Stinger missile being the
>classic example.)

To simplify the discussion, and to remove any licensing issues that crop
up when discussing RSA, consider whether DES software is exportable.
To simplify even further, consider the question of whether a printed
book available at B. Daltons book store which contains a printed copy of
source code that implements DES encryption is exportable.  I maintain
that this book can be exported under the license I mentioned.  I
further maintain that this book and it's contents are uninteresting to
the State Department and NSA once it has been made available to the
public.  This institutional disinterest is codified in the description of
the type of information that is freely exportable.

The reasons for this institutional disinterest seem obvious, but
maybe I'm missing something subtle.

If you agree that this printed book is exportable, then few would
disagree that a magnetic tape containing this source code is exportable.
If you agree that the source code on tape is exportable, then few
would disagree that the compiled version of this source code is exportable.

Note all of the language in the regulations regarding pre-publication
review.  When you read the regulations, they clearly indicate that once
information is publicly available (can be obtained in a library/bookstore),
then the cat is out of the bag and the information is exportable.  I
believe that the Commerce Department, State Department, and NSA are
completely uninterested in preventing the export of anything that's
available to anybody at B. Dalton's bookstore.

Anonymous ftp is fully equivalent to B. Dalton's bookstore or a
public library.

Note that this discussion has nothing to do with the exportability
of integrated hardware/software crypto solutions.  My premise is
primarily that the book containing the DES source code is freely
exportable because it is publicly available information.

Regards,
Ed Hamrick
Technical Details
Message-ID: <1993Jan07.202702.20110@convex.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!usc!cs.utexas.edu!convex!hamrick
References: <1993Jan6.224021.986@nntp.hut.fi> <1993Jan07.075317.15435@convex.com> <1993Jan7.083740.6128@qualcomm.com>

Show Full Headers
Complete Article Headers
Newsgroups: alt.security.ripem,sci.crypt
Path: arc1-ca.pugleaf.net!sparky!uunet!usc!cs.utexas.edu!convex!hamrick
From: hamrick@convex.com (Ed Hamrick)
Subject: Re: RSAREF and RIPEM now available via anonymous FTP
Message-ID: <1993Jan07.202702.20110@convex.com>
Sender: usenet@convex.com (news access account)
Nntp-Posting-Host: convex1.convex.com
Organization: CONVEX Computer Corporation, Richardson, Tx., USA
References: <1993Jan6.224021.986@nntp.hut.fi> <1993Jan07.075317.15435@convex.com> <1993Jan7.083740.6128@qualcomm.com>
Date: Thu, 07 Jan 1993 20:27:02 GMT
X-Disclaimer: This message was written by a user at CONVEX Computer
              Corp. The opinions expressed are those of the user and
              not necessarily those of CONVEX.
Lines: 51