*BSD News Article 2703


Return to BSD News archive

Newsgroups: comp.unix.bsd
Path: sserve!manuel!munnari.oz.au!uunet!decwrl!deccrl!news.crl.dec.com!rdg.dec.com!rushes.enet.dec.com!baird
From: baird@rushes.enet.dec.com (Alasdair Baird)
Subject: Re: 386bsd security enhancements are needed before using INTERNET!
Message-ID: <1992Jul29.085707.18244@rdg.dec.com>
Sender: news@rdg.dec.com (Mr News)
Reply-To: baird@films.enet.dec.com
Organization: Digital Equipment Corporation
References: <1992Jul27.183548.20598@news.iastate.edu> <1992Jul27.191435.14721@gateway.novell.com> <1992Jul27.214249.1065@news.iastate.edu> <1992Jul28.164752.7422@gateway.novell.com>
Date: Wed, 29 Jul 1992 08:57:07 GMT
Lines: 27

In article <1992Jul28.164752.7422@gateway.novell.com>, terry@npd.Novell.COM (Terry Lambert) writes:
|> 
|>	There are exceptions, and it is possible to get an export license
|>for crypt libraries.  It is much easier to get an export license for a
|>set of binaries (login, passwd, rshd, rlogind, etc.) than it is to get one
|>for the library itself.  Part of the terms of the license include who you
|>are allowed to sell it to. Internet access is restricted in a similar fashion,
|>thus it is likely that a grant of license to distribute binary utilities for
|>386BSD would be allowed, if requested.  But this would mean that not all of
|>386BSD is publically distributable as source.
|> 

Of course if someone were to implement the DES algorithm outside the US, say in
Australia (perhaps using one of the many books that are freely available which
explain the algorithm) and then make the source available outside the US, there
is no problem as it can be imported and used in the US (though not re-exported)
and obtained and used elsewhere too without breaking US regulations.  I think
the main restriction here is that is has to be DES so the NSA can be sure of
breaking it any time they want.  This would also have the unfortunate effect of
splitting the distribution in two.

But then you shouldn't beleive anything I say, because not being a US citizen
I'm probably considered to be an agent of a hostile power...

---------
Alasdair Baird                              Digital Equipment Co.
Speaking only for myself.                   Livingston, Scotland.