From: Alex Strasheim <cp@proust.suba.com>
Date: Sat, 27 Jan 1996 05:39:43 +0800
To: tcmay@got.net (Timothy C. May)
Subject: Re: Crypto Exports, Europe, and Conspiracy Theories
In-Reply-To: <ad2bf34e04021004d2fa@[205.199.118.202]>
Message-ID: <199601261906.NAA03072@proust.suba.com>
MIME-Version: 1.0
Content-Type: text


There's a lot I don't know about the NSA, Tim's original post in this
thread reminded me of that.  I don't know if they'll continue to be
successful supressing crypto -- perhaps (probably?) I've underestimated
them. 

But I think networking is creating an enormous commercial demand for 
strong crypto that didn't previously exist.  It's one thing to suppress 
an esoteric technology that few people feel the need for;  it's quite 
another to suppress a reasonably well understood technology that everyone 
feels they need to run their businesses.

The NSA is powerful, but so are commercial interests.  I tend to think 
that the money will win out in the end, but I have to admit that I don't 
know enough about the NSA to have a serious opinion.

Why aren't foreign companies flooding America with strong crypto?  Well, 
there are clearly pressures of the sort Tim described at work.  But there 
are other factors as well:

o	Crypto has only recently become useful/necessary to lots of
	business people -- the demand from crypto is born out of the
	networking boom, especially the Internet, which isn't picky
	about who can use it.  American software companies dominate 
	the industry -- they grabbed market share in the days before 
	crypto was vital.  There's inertia at work.

o	Crypto isn't at the top of the list of factors when people pick
	software.  Do most of use use 40-bit downloadable Netscape's
	or Mosaics with strong crypto?  Netscape wouldn't be easy to
	pick off for New Delhi programmers (an understatement, of course), 
	and crypto wouldn't give them as big of an advantage as it probably
	ought to.

o	Most foreign countries aren't wired as well as we in the US are.
	Most people in Switzerland don't have cheap easy access to the net,
	for example.  That's one reason that the web, a good Swiss idea, has
	been developed primarily in this country.  America has more people
	thinking about the net than other countries do, and it's not 
	surprising that we're out in front in net software.

These factors are short lived, and they're not going to keep crypto out of
America forever.  (That doesn't mean the NSA can't -- although I don't 
think they can.)

Digicash is probably the first significant crypto product to be exported
to America.  It's not very popular yet, but I think that most of us here
agree that it is, in potential at least, as significant as
Mosaic/Netscape.  It's important to note that this extremely important
product couldn't have been produced here, patents aside.  Transaction
systems need to be international, and our rules make America an unsuitable
place from which to launch tranaction software.

Will the NSA be able to stand up against growing economic pressures?  I 
don't know.  But it does seem pretty clear that those pressures are 
building all the time, and that the problem of supressing crypto in 1996 
is a much tougher one than it was in 1986.

In general, it's myopic and ill advised to focus on one factor -- 
economics, politcs, the national security establishment -- when trying to 
predict what will happen.  I've probably been guilty of placing too much 
emphasis on money, and not enough on the NSA.

We do seem to be winning, though.