From: Greg Broiles <gbroiles@netbox.com>
Date: Tue, 8 Apr 1997 03:59:44 -0700 (PDT)
To: cypherpunks@toad.com
Subject: Denning paper on crypto, EU mandatory GAK
Message-ID: <3.0.1.32.19970408040544.0075e1c0@postoffice.pacbell.net>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

Apologies if this has been mentioned before, but I ran across a new (new to
me; it's dated 2/19/97) paper by Dorothy Denning re crypto and crypto
policy/legislation. Historically, her work has proven to precede/predict
policy shifts on the part of the US government.

The paper has little information which is new to a reader of cpunks; but I
did note one ominous paragraph referring to the role of "TTPs" in Europe:

>>>>
The European Commission has been preparing a proposal to establish a
European-wide 
network of Trusted Third Parties (ETS) that would be accredited to offer
services that support digital signatures, notarization, confidentiality, and
data integrity.
The trust centers, which would operate under the control of member nations,
would 
<<<<
                                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>>>>
hold keys that would enable them to assist the owners of data with emergency
decryption or supply keys to their national authorities on production of a
legal 
<<<<
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>>>>
warrant. The proposal is expected to be adopted by the Commission, with
discussions provisionally scheduled in the Council of the European Union for
the first half of 1997 [22]
<<<<

Also see <http://www.seven77.demon.co.uk/krisis/>, which appears to be the
home page for a pilot project creating a software and political/corporate
infrastructure for Europe-wide GAK. Yow. 

Also of interest is her cite
<http://guru.cosc.georgetown.edu/~denning/crypto/Trends.html#29> to John
Young's archived version of the 12/30/96 revision of the EARs instead of the
BXA's.

The paper itself is at
<http://guru.cosc.georgetown.edu/~denning/crypto/Trends.html>; like it or
not, it may prove to be a useful insight into what's coming in 1997/1998. 
-----BEGIN PGP SIGNATURE-----
Version: 4.5

iQEVAgUBM0oWVP37pMWUJFlhAQEClgf/WIIWSILMpyM47o1LU83cS78V7OHuSpJM
WsSrajoKX4TxbH/+Dwcwjf/s8IFI41+rj9VcL+pucXN+HarztYJpT6MX80ULI6sa
EvmpXZ2gfKBisvHs9co2CRvSHwTip03sJvciGxilk0V70jNPaSZfRPb+22wsQerl
his86IqSUt1OQFkXLmiOCak0z1jT6D25AoVCc+M0EoKfE7KwmOdoiFxhrAw1/HqZ
09H98nB55fS207zBsKW6b0u2zQfA9pTHeNfRn7V1PHnqaO4iprGy4SDMvbh/4t87
1wznAc25Un1QwTPTAjQypS7vS+qlMGRUPIO2uwzCi6HuK84c2Tf9Cw==
=qR1F
-----END PGP SIGNATURE-----

--
Greg Broiles                | US crypto export control policy in a nutshell:
gbroiles@netbox.com         | 
http://www.io.com/~gbroiles | Export jobs, not crypto.
                            |