RE: 40-bit VS 128-bit Encryption

From: Jonathan Grotegut <jgrotegut(at)directpointe.com>
Date: Mon Jun 23 2003 - 12:50:49 EDT

Morning,

I am with you Phil in the fact that I could be wrong as well. However, if memory serves correctly, they have relaxed the export laws a little bit. I believe the US will allow 128 bit encryption to be exported, except to a specific list of countries, i.e. Iraq, Iran, etc. I unfortunately don't know where I heard/read that information or where it can be verified. Perhaps the DOJ website?

Jonathan Grotegut

-----Original Message-----
From: phil baskers [mailto:phil@baskerville.cjb.net] Sent: Sunday, June 22, 2003 9:30 AM
To: security-basics@securityfocus.com
Subject: Re: 40-bit VS 128-bit Encryption

Morning,

I am not fully up to date with US law but I believe that it is illegal to "export" encryption stronger than 56 bits from the US with the inclusion of a backdoor "for law enforcement". If no backdoor, the limit is 40 bits. These figures are old and I cannot guarantee that they are up to date but can imagine the law would have been changed since 9-11.

<snip>

---

Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare.      

Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance.           

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm

---

Received on Tue Jun 24 17:51:19 2003