1994-06-16 - Re: [ANSWER] NIST’s ftp site

Header Data

From: Justin Lister <ruf@osiris.cs.uow.edu.au>
To: ruf@osiris.cs.uow.edu.au (Justin Lister)
Message Hash: e205269b50f8c059cb6e1f52a2c757073ba2eb964c9bc353d13a0f8c12174ef0
Message ID: <199406160222.AA21898@osiris.cs.uow.edu.au>
Reply To: <199406160057.AA20925@osiris.cs.uow.edu.au>
UTC Datetime: 1994-06-16 02:23:30 UTC
Raw Date: Wed, 15 Jun 94 19:23:30 PDT

Raw message

From: Justin Lister <ruf@osiris.cs.uow.edu.au>
Date: Wed, 15 Jun 94 19:23:30 PDT
To: ruf@osiris.cs.uow.edu.au (Justin Lister)
Subject: Re: [ANSWER] NIST's ftp site
In-Reply-To: <199406160057.AA20925@osiris.cs.uow.edu.au>
Message-ID: <199406160222.AA21898@osiris.cs.uow.edu.au>
MIME-Version: 1.0
Content-Type: text/plain

> It wasn't/isn't the only ftp site in US that has fips181.txt available.
> There are other sites that still have the information.
> Besides I doubt that anyone would having problems finding sources of DES
> they are all over the net (in and out of US). 
> Clearly ITAR fails so be happy.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - blatant statements tend to get flamed so
I thought I should follow up a little.

What I mean is it clear that ITAR fails to stop the exporting of crypto (for
the individual). We have seen many examples when code has already found its
way outside the US, before it even becomes availiable to many machines in
the US (PGP,RSAREF,...). Also *most* algorithms developed in the US are 
documented extensively in text that is also available outside (with conference
proceedings, journals, etc), it is just a matter of writting the code.

Clearly if ITAR was to work it would require text exports to be banned as well.

From what I see, ITAR is only slight inconvience to the non-US individual, 
whereas it is also a major thorn to US software developers that can't 
release single versions of software containing crypto, in that they have to 
have US and Rest-of-World versions, ala PGP (unless they develop the software
outside of the US ?).

|  ____       ___     | Justin Lister                 ruf@cs.uow.edu.au  |
| |    \\   /\ __\    |     Center for Computer Security Research        |
| | |) / \_/ / |_     | Dept. Computer Science      voice: 61-42-835-114 |
| |  _ \\   /| _/     | University of Wollongong      fax: 61-42-214-329 |
| |_/ \/ \_/ |_| (tm) |     Computer Security a utopian dream...         |
|                     |  LiNuX - the only justification for using iNTeL  |