Re: Crippled Notes export encryption

[Jeff Weinstein <jsw@netscape.com>]

Ian Goldberg wrote:
> OK; so what if I have code that says:
> 
> RNG_GenerateRandomBytes(buf, size);
> Hash(outbuf, buf, size);
> /*
>  *  It would be really nice if outbuf were RSA-encrypted
>  *  with (expon,modulus) at this point and the result placed in
>  *  outbuf2, but we have to do the following instead:
>  */
>     for(i=0;i<hashsize;++i) outbuf2[i] = ~outbuf[i];
> fwrite(outbuf2, hashsize, 1, fp);
> 
> Would the above code be export-restricted because it contained wishful
> thinking about how nice it would be to use encryption?

  The problem is that the government refuses to publish the rules.
They make people ask for approval for every piece of code that is
exported.  This gives them lots of wiggle room so that they can keep
changing the rules in the face of technical, legal, or political
innovation.

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.