// COMPLETE THREAD

Re: Triple-DES controlled?

5 expanded posts · every known parent and child

NODE e8794e2eRe: Triple-DES controlled? Rich Salz <rsalz@osf.org>Mon, 7 Aug 95 21:03:16 PDT

>I have not heard of export licenses being granted for 3DES.

Didn't the ANSI financial committee just adopt 3DES (over NSA
objections)?  Presumably they consider the export situation solved/solvable.
	/r$

NODE f57b11b9Re: Triple-DES controlled? "Perry E. Metzger" <perry@panix.com>Mon, 7 Aug 95 21:07:22 PDT

Rich Salz writes:
> >I have not heard of export licenses being granted for 3DES.
> 
> Didn't the ANSI financial committee just adopt 3DES (over NSA
> objections)?

Yes.

> Presumably they consider the export situation solved/solvable.

There is the trivial solution of buying outside the US. The hardware
is actually better these days as the Germans and others have a
worldwide market and the economies that brings.

.pm

NODE f0206ce4Re: Triple-DES controlled? Adam Shostack <adam@bwh.harvard.edu>Tue, 8 Aug 95 07:42:59 PDT

| Didn't the ANSI financial committee just adopt 3DES (over NSA
| objections)?  Presumably they consider the export situation solved/solvable.
| 	/r$

As Perry points out, they consider it solved, albeit to the detriment
of the US infosec industry.  One would hope those companies are
complaining loudly to their congressmen.

Adam


-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume

NODE 115fb3dfRe: Triple-DES controlled? "Perry E. Metzger" <perry@panix.com>Tue, 8 Aug 95 07:55:58 PDT

Adam Shostack writes:
> 
> | Didn't the ANSI financial committee just adopt 3DES (over NSA
> | objections)?  Presumably they consider the export situation solved/solvable

NODE 995ec535Re: Triple-DES controlled? hallam@w3.orgTue, 8 Aug 95 08:37:19 PDT

>>I have not heard of export licenses being granted for 3DES.

>Didn't the ANSI financial committee just adopt 3DES (over NSA
>objections)?  Presumably they consider the export situation solved/solvable.

There is absolutely no difficulty obtaining cryptographic aparatus outside the 
US. I had an entire distribution of PEM and X500 that was entirely written 
outside the US.

DES is avaliable from many sources, there are many tripple DES products 
avaliable.

It is not impossible to get export licenses, there have been several issued for 
DES for financial applications.

If the US wants to be cut out of the market for financial services software 
thats up to them. Non US citizens can write crypto code as well, the British 
crypto tradition is far longer than the US one for example.

	Phill