*BSD News Article 2764


Return to BSD News archive

Newsgroups: comp.unix.bsd
Path: sserve!manuel!munnari.oz.au!uniwa!DIALix!zeus!peter
From: peter@zeus.dialix.oz.au (Peter Wemm)
Subject: Re: 386bsd security enhancements are needed before using INTERNET!
Message-ID: <Bs6xxE.4H9@zeus.dialix.oz.au>
Organization: Karam Pty. Ltd. Perth, Australia
References: <1992Jul27.183548.20598@news.iastate.edu> <1992Jul27.191435.14721@gateway.novell.com> <1992Jul27.214249.1065@news.iastate.edu> <1992Jul28.164752.7422@gateway.novell.com> <1992Jul29.085707.18244@rdg.dec.com>
Date: Thu, 30 Jul 1992 07:24:49 GMT

baird@rushes.enet.dec.com (Alasdair Baird) writes:

>Of course if someone were to implement the DES algorithm outside the US, say in
>Australia (perhaps using one of the many books that are freely available which
>explain the algorithm) and then make the source available outside the US, there
>is no problem as it can be imported and used in the US (though not re-exported)
>and obtained and used elsewhere too without breaking US regulations.  I think
>the main restriction here is that is has to be DES so the NSA can be sure of
>breaking it any time they want.  This would also have the unfortunate effect of
>splitting the distribution in two.

>But then you shouldn't beleive anything I say, because not being a US citizen
>I'm probably considered to be an agent of a hostile power...

It is already done.. There are two or three libraries that spring to mind.
There's UFC-crypt (ultrafast crypt), descore, and libdes.  Two of these have
recently been posted on news. (UFC is a U.K. creation, and one of
the others is Australian).  Look in your comp.sources archives.... :-)

>---------
>Alasdair Baird                              Digital Equipment Co.
>Speaking only for myself.                   Livingston, Scotland.
-- 
Peter Wemm : peter@zeus.dialix.oz.au     If it's broke, fix it (The MS-DOS way)
Work phone: +61-9-479-1855      If it aint broke, don't touch it (The Unix way)
Fax: +61-9-479-1134     If we can't fix it, it ain't broke (Maintainer's Motto)
  "Don't give me that intelligent life cr*p, find me something to blow up!"