From: shirey (8/10/92) To: Fred Chase From IEGATE Export Rules for Cryptograp Received: from mbunix.mitre.org by iegate.mitre.org (SMTP\QM 1.1.3) id AA2796299418; Mon, 10 Aug 1992 13:50:18 Received: from mwunix.mitre.org by mbunix.mitre.org (911016.SGI/4.7) id AA15466; Mon, 10 Aug 92 13:07:23 -0400 Return-Path: Received: by mwunix.mitre.org (5.61/SMI-2.2) id AA10059; Mon, 10 Aug 92 13:04:53 -0400 From: shirey@mitre.org Received: from smiley.mitre.org by mwunix.mitre.org (5.61/SMI-2.2) id AA09928; Mon, 10 Aug 92 13:03:59 -0400 Organization: The MITRE Corp. Received: from [128.29.52.100] (shirey-mac.mitre.org) by smiley.mitre.org.stc (4.1/SMI-4.1) id AA05829; Mon, 10 Aug 92 13:05:46 EDT Message-Id: <9208101705.AA05829@smiley.mitre.org.stc> Date: Mon, 10 Aug 1992 13:07:57 -0500 To: infsecur@mitre.org Subject: Export Rules for Cryptography X-Mdf: fnc re-routed to "fnc@mbunix.mitre.org" This has been a hot topic in the IETF. Steve Crocker (IETF Security Area Director and SAAG Chair) passed this out in paper form in Cambridge, and has now made it available electronically. > >Subject: Documentation of export rules (typo fixed) >Date: Sun, 26 Jul 92 17:45:33 -0400 >From: Stephen D Crocker > >Folks, > >As most of you have seen, I whipped up a crib sheet on the rules >governing export of cryptographic products from the U.S. I've now >transformed that crib sheet into an ASCII to make it easy to send >around the net It's attached below for your review and comment. > >Ideally, this ought to be part of a larger document which covers the >basic concepts and rules. (This has been a back-burner work item >within the SAAG for man moons.) > >Interest in this topic is heating up. At the last IETF meeting, Phill >Gross asked for a plenary presentation on all of this at the next IETF >meeting. since the IETF meeting will be in D.C. in November, we may >be able to have some expert from the government give the talk; >otherwise one of us can present it. > >I've put together a brief mailing list of people who should >participate in this discussion. We can expand it to a full-scale >mailing list if we want, or we can keep it focused. My primary aim is >the accumulate an accurate picture of what the rules are; I'm *not* >interested, at least in this forum, in protracted discussion on the >merits of these rules. > >Thanks, > >Steve > > +-------------------------------------+-------------------------------+ > | Steve Crocker | Voice: 301-854-6889 | > | Trusted Information Systems | FAX: 301-854-5363 | > | 3060 Washington Road |-------------------------------| > | Glenwood, MD 21738 | Internet: crocker@tis.com | > +-------------------------------------+-------------------------------+ > > Summary of Export Rules for Products > Containing Cryptographic Functions > > Stephen D. Crocker > July 26, 1992 > > For use within/by > >Security Algorithm U.S. & Banks & All >Service Used Canada U.S. Subs Other > > >Integrity, RSA A C C >Signature & >Access Ctl DES A C C > > Other A C C > Symmetric > > >Key RSA B F F >Management > DES B E E > > Other B E E > Symmetric > > >Encryption RSA B G G > > DES B D G > > Other B F F > Symmetric > > >Key > >A No restriction. > >B No restriction. A label is recommend which warns that export of > the product requires a license. > >C A license is required. A general Commerce Department commodity > license is available except for shipments to Eastern bloc > countries. Individual licenses are needed for shipment to Eastern > bloc countries and are generally granted. > >D A State Department license is required and will generally be > granted. > >E An export license is needed. Each application will be examined on > a case-by-case basis. For some products, a Commerce Department > commodity license may be available. > >F An export license is required and is generally granted provided > the modulus does not exceed 512 bits. > >G An export license is required and generally will NOT be granted. Regards. -Rob- Robert W. Shirey, The MITRE Corporation, Mail Stop Z202, 7525 Colshire Dr., McLean, VA 22102-3481 shirey@mitre.org * tel (703) 883-7210 * fax 883-1397 ======================================================================