Message-Id: <9305251806(_dot_)AA15526(_at_)TIS(_dot_)COM>
Subject: Re: DES IV's, and EDE3 vs. EDE2
Date: Tue, 25 May 93 14:06:06 -0400
From: Stephen D Crocker <crocker(_at_)TIS(_dot_)COM>
Exportable cryptography will be weaker than some threshold, and many
of us will demand stronger cryptorgraphy for non-exportable systems.
I wish you weren't so negative about our chances to have the export laws
made sensible. [pause while people laugh] Isn't it about time for our laws
to allow export of any crypto up to the strength of what can be purchased
(or acquired for free) in the country of destination? For example, PGP is
available almost everywhere. So are DES subroutines, from which a
programmer could build up a 25x DES chain, if she so chose.
I would rather we write to the NIST tomorrow in response to their request
for comments on export regulations than assume that we'll forever have
trouble exporting cryptography less powerful than what can be had for free
over there.
- Carl