From: Craig Strickland <tgi@null.net>
Date: Tue, 29 Jul 1997 16:51:38 +0800
To: CypherPunks <cypherpunks@toad.com>
Subject: Re: New Crypto Application
In-Reply-To: <199707272124.PAA12529@xmission.xmission.com>
Message-ID: <3.0.3.32.19970729042336.0341fca0@mail.emi.net>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----

At 08:10 07/28/97 -0700, Bill Stewart <stewarts@ix.netcom.com> wrote:
>At 03:24 PM 7/27/97 -0600, Guillotine <guill@xmission.com> wrote:
>>The encryption algorithm,
>>using a symmetrical is going to be as strong as legally allowed, 
>
>There are no legal restrictions on cryptography strength in the US;
>only restrictions on what's exportable, and even then you need permission. 

This triggered a thought that may have already been discussed, but I thought 
I'd throw it out anyway.  Since the export of cryptography = munitions, what 
happens if I write an application that's the "shell", and contract with a 
national and resident of a foreign country to write the crypto module.  I do 
not export the crypto technology other than sending them a printed book 
(which Phil Karn's filing determined was exportable as a non-munition).

I then retail the software as a 2-component system (distantly like PGP 2.6.3i 
could have been) on the web.  FTP the "shell" from my domestic site, and FTP 
the "crypto" from the foreign site.  Both install to make the seamless 
finished product.

Anyone seen anything in ITAR addressing such a hiring arrangement?

I'm not planning it, just spewing hypotheticals that tickle my curiosity.
- --
Internet:  tgi@null.net                   Physical:  26 11'46"N  80 14'20"W
Web:       http://pobox.com/~tgi/         Amateur:   KE4QJN
PGP Key:   Available from key server: pgp-public-keys@pgp.mit.edu
           Fingerprint: E6 E1 25 DE 7C 6F 34 CD  E7 75 ED 21 7E 45 6E D7

"Our task of creating a socialist America can only succeed when those who
would resist us have been totally disarmed."  Sara Brady, Chairman, Handgun
Control, to Sen. Howard Metzanbaum, The National Educator, January 1994,
Page 3.

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEPAwUBM92ogjOTF4+oUwAJAQHEgwfQowZom4T10sze3yBMVvY+7PpS4/KPGY5F
7dSnYa9a3/E5RNRbh9CF8SFMAenlpHLtp8FcA499Ka+FGc+4RzNu/4JtIwaYe/lC
CR1KlvKr16z+ybwryOm3ElJCtvuMquaA0EcG84Ddqv+z6XQCMSji8lib2h6FGgoU
IXlix4XbPZGMvDw8ne/3E7Ias/U88L12SHkHIJJdA2otZmSlx+pw5LCsnbPPuOyg
ZrfXukQewo+nVpfzEPViUrvfq5n/1NgqRuddLRtrBDtmW/oUBRGMjZRREfU4LbmZ
/RCXeFe92EME4o0UBY1jwmrzzLy/93wcW50FRhqnGorI7w==
=3w14
-----END PGP SIGNATURE-----