Re: Exporting from Canada (was Re: Let's try breaking an SSL RC4 key)

["M. Plumb" <mp@io.org>]

Sorry for taking so long to respond to this.

I have been checking out the Canadian rules for exporting crypto.
Basically (according to "A Guide to Canada's Export Controls",
published by the Department of Foreign Affairs and International
Trade) public domain software can be exported from Canada -- one
might need to file a form with Canadian Customs for each export,
but the export it self is legal. (Public domain is defined as
technology that has been made available without restrictions upon
it's further dissemination. Copyright restrictions do not remove
technology from the public domain. So, I'm not quite sure if PGP
falls within that definition.)

However, goods of U.S. origin are export restricted, unless said
goods are further processed outside the U.S. so as to result in a
substantial change in value, so some of the PGP development would
need to be done in Canada.
--
	-marc