Re: Java Crypto API questions

At 02:17 AM 6/3/96 -0700, Jeff Weinstein wrote:
>Andrew Loewenstern wrote:
>> 
>> Moltar Ramone writes:
>> >  Probably.  But they won't be able to export the signed 3DES
>> >  package :) It leaves foreign vendors in trouble, is where.
>> 
>> Sun can export the signature though.  The vendor already has the package,
>> they just need the sig/cert...
>
>  Not likely.  Sun will probably be required to agree not to do this
>as a condition of exporting software with "pluggable crypto".  Software
>with hooks for crypto functions is treated the same as the actual crypto
>as far as the ITAR is concerned.

But you haven't explained why somebody can't export JUST the signature.  You 
know, import the software, have Sun sign it domestically, strip off everything that isn't a 
signature, and export the signature.  Append it to the un-imported code 
outside the country.

Jim Bell
jimbell@pacifier.com

On Mon, 3 Jun 1996, jim bell wrote:
> 
> But you haven't explained why somebody can't export JUST the signature.  You 
> know, import the software, have Sun sign it domestically, strip off everything that isn't a 
> signature, and export the signature.  Append it to the un-imported code 
> outside the country.

Ancillary device... It's pretty clear cut.

Simon