On Thu, 17 Apr 1997, Blake Ramsdell wrote:
I understand that there is a faction that says that RC2 40-bit should
just be changed from MUST to SHOULD. This will cause a lack of
interoperability. I further understand that there is a faction that
says that RC2 should be removed completely from the algorithm suite.
This will also cause a lack of interoperability.
These statements are simply not true. There is nothing that prevents a
non-US company from developing a product containing strong crypto. In
fact, for SSL, this has already been done. There is also an independent
implementation of PGP.
RC2 may actually make interoperability worse, because companies may need
to license the RC2 code from RSA to be 100% kosher, and the US may
prohibit RSA from exporting this license.
What will really kill interoperability for sure is splitting S/MIME into
different profiles.
Raph