From: Bill Frantz <frantz@netcom.com>
Date: Tue, 24 Dec 1996 16:37:23 -0800 (PST)
To: bobbi <rkluge@nunic.nu.edu>
Subject: Re: domestic laws/policies
In-Reply-To: <v03007811aee5e4fb78dd@[206.217.121.78]>
Message-ID: <v03007816aee628013a9c@[207.93.129.120]>
MIME-Version: 1.0
Content-Type: text/plain


At 4:02 PM -0800 12/24/96, bobbi wrote:
>I got asked a question the other day and that person emphatically stated
>you "must" register the algorithm with the NSA(for domestic use).
>I was not aware of this even for exporting software that has cryptographic
>capability. If you export software do you have to "register" the
>algorithm? Or maybe I should ask - are there any situations where you do
>have to register the algorithm? For export I'm only aware that the
>strength of the algoritm has to be equal to or less than 40-bit DES.

You have to describe the algorithm as part of getting an export license, or
commodity jurisdiction.  Since this description must be in sufficient
detail so a reader can implement the algorithm, this description might
properly be described as "registration".


-------------------------------------------------------------------------
Bill Frantz       | Client in California, POP3 | Periwinkle -- Consulting
(408)356-8506     | in Pittsburgh, Packets in  | 16345 Englewood Ave.
frantz@netcom.com | Pakistan. - me             | Los Gatos, CA 95032, USA