Re: ITAR vs. Diffie-Hellman Key Exchange?

[Derek Atkins <warlord@MIT.EDU>]

Full Kerberos, with DES, *is* available outside the US.  The US allows
export of cryptographic *binaries* for authentication purposes.  For
example, it is possible to get DECathena, which contains Kerberos with
DES, which is compatible with MIT Kerberos.  It even contains
libraries, but not the functions to encrypt data for privacy, just
enough to create checksummed messages.  Its just that the SOURCE code
is not available, but it is fairly simple to generate an exportable
binary suite.

I doubt DH is exportable, since it is key exchange, which in general
is not exportable.  Jim, care to comment?

Yes, there is a version of RSAREF w/ DH included (I have a beta-test
version, although I haven't played with it a lot).  I don't know when
this will be released to the world.

-derek