RE: 40-bit VS 128-bit Encryption

["Joseph Mathews" <mathews () itd nrl navy mil>]

Good morning,

Information regarding US export controls on encryption can be found on the
Commercial Encryption section of the Bureau of Export Administration's
website:

http://www.bxa.doc.gov/encryption/default.htm

Hope this helps.

Joe

-----Original Message-----
From: Jonathan Grotegut [mailto:jgrotegut () directpointe com]
Sent: Monday, June 23, 2003 12:51 PM
To: phil baskers; security-basics () securityfocus com
Subject: RE: 40-bit VS 128-bit Encryption


Morning,

I am with you Phil in the fact that I could be wrong as well.  However,
if memory serves correctly, they have relaxed the export laws a little
bit.  I believe the US will allow 128 bit encryption to be exported,
except to a specific list of countries, i.e. Iraq, Iran, etc.  I
unfortunately don't know where I heard/read that information or where it
can be verified.  Perhaps the DOJ website?

Jonathan Grotegut


-----Original Message-----
From: phil baskers [mailto:phil () baskerville cjb net]
Sent: Sunday, June 22, 2003 9:30 AM
To: security-basics () securityfocus com
Subject: Re: 40-bit VS 128-bit Encryption


Morning,

I am not fully up to date with US law but I believe that it is illegal
to "export" encryption stronger than 56 bits from the US with the
inclusion of a backdoor "for law enforcement". If no backdoor, the limit
is 40 bits. These figures are old and I cannot guarantee that they are
up to date but can imagine the law would have been changed since 9-11.

<snip>

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------