From: das@razor.engr.sgi.com (Anil Das)
Date: Fri, 2 May 1997 10:19:32 +0800
To: cypherpunks@cyberpass.net
Subject: EAR questions.
Message-ID: <9705011902.ZM27479@razor.engr.sgi.com>
MIME-Version: 1.0
Content-Type: text/plain


[ Didn't get much response when I posted this to cryptography@c2.net.
Hope there will be more response on cypherpunks. ]

	I couldn't find a solid answer to the following questions,
after reading relevent sections of the EAR, and talking to some
people. I am looking for considered opinions, not legal advice.

1) Does a software such as the DESCHALL client or Peter Trei's DESKR
program, in object code form, need a license to be exported? Keep
in mind that even thought there are some cryptographic functions
inside the programs, they cannot be directly used to encrypt data,
nor can they be easily modified (i.e. without reverse engineering)
to make data encryption possible.

2) Does the "printed matter exception" apply only to publications?
Is it legal, under the EAR, for somebody in the US to print out
the source code for an encryption program on paper and send it to
a private party abroad (not a country in the enemies list). Does
it make any difference whether this is done for monetory compensation?
Does it make any difference whether the sender intends to keep the
source code secret between himself and the recipient?

Btw, it looks like the language about scannable encryption source code,
that was in the draft regulations, have been removed.

One more, general question.

3) Is it correct to say that, as long as you are not selling it to
a military organization and the software is intended for civilian
use, the export of encryption software is now controlled exclusively
by the EAR, and not by the ITAR? I ask this because many of the
people who answered "only publications" to question 2) above,
could only quote the ITAR in support of their position.

	Thanks.

--
Anil Das