re: Anonymous FTP
I didn't know RIPEM was available that way. RSAREF ( by itself) is
not. Did you go through our procedure? It's like getting DES or
Kerberos from MIT.
To answer your questions:
1. I'd guess that's up to the authorities in that particular country.
2. As I far as I can tell, you are not violating patent or export law
by posting a RIPEM public key, so I don't see any risk in this.
3. This is a tricky one - I don't know for sure, but I wouldn't risk it.
The intent of the ITAR is to prevent this.
4. I wouldn't do this for the same reason given in #3.