From: iang@cs.berkeley.edu (Ian Goldberg)
Date: Fri, 3 May 1996 12:09:07 +0800
To: cypherpunks@toad.com
Subject: Re: [Fwd: Cylink can export 128-bit DH?]
In-Reply-To: <199605011919.MAA27020@netcom8.netcom.com>
Message-ID: <4masts$uvh@abraham.cs.berkeley.edu>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

In article <199605011919.MAA27020@netcom8.netcom.com>,
Bill Frantz <frantz@netcom.com> wrote:
>At 12:22 AM 5/2/96 +0700, peng-chiew low wrote:
>>Daniel R. Oelke wrote:
>>> There are provisions for exporting DES for banking purposes.
>>> Generally it is a hardware card that "can't" be reused outside
>>> of the banking transfer machine. 
>>
>>So far, I've seen DES software from a couple of U.S. companies. The question
>>is "Is it the U.S. domestic DES or "export flavored" DES? As for the hardware,
>>would'nt it be inconsistant if the DES supplied is the Domestic DES?
>
>As far as I know, DES is DES, domestic or export.  If your DES
>interoperates with domestic DES (or popular implementations available on
>non-US servers), then you have DES.

Not quite.  CDMF key shortening was designed by IBM to shrink a 56-bit DES
key to 40 bits, suitable for export.  See AC2, page 366.  I heard a rumour
that CDMF is in SET, but I'm not sure how much that makes sense.

   - Ian

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMYj2w0ZRiTErSPb1AQFuSgP9EhcSgF/DVC1BFd8DPPUeD6C27HyR+Wqj
YgXXhemNgni3WGi0v7jDnhqiId0YcRpzVnlywkKvd2O6dLZVMEavL+7qytTRlo/E
iu5twOAc39JXkSj9pjpyvzChaiooujHyHKCqnCNG37Ggm4jTdHY+y59zmxy8wNka
iiXVOurajKE=
=1DPi
-----END PGP SIGNATURE-----