Re: BSAFE 4.0 to force GAK?!

[Adam Shostack <adam@homeport.org>]

One would hope that this simply drives the market towords using
DSA/DH from toolkits like those available with support from Baltimore,
PGP, CryptoMathic, etc.  (I maintain a list of free and commercial
crypto libraries at www.homeport.org/~adam/crypto.  The list is
oriented at hackers and cypherpunks, and so gives far more  detail on
the free libraries.)

Theres no reason to be using BSAFE if it enforces Uncle Sam's
ludicrous political requirements.  Use a library from the free world.
Use algorithms that are not encumbered.  Theres no longer any reason
not to. 

Adam


steve wrote:
| FYI
| 
| Jan. 26's Network World has an article on page 33 titled "RSA blasts
| (but also supports) Government encryption policy".
| 
| The paragraph of note is the fourth paragraph which reads:"The next
| version of the RSA encryption toolkit, BSAFE 4.0, will force those
| building products with anthing over 56 bit strength encryption to use a
| key-recovery center for exportable products...."
| 
| I haven't been able to confirm this with other sources yet but the
| glaring question is how will this be enforced and how will it affect
| domestic products that wish to use BSAFE 4.0 for their crypto. Further
| what ramifications does this hold for their S/Mail toolkit for S/MIME?
| and I haven't seen this discussed on the list yet.
| Steve O
| -- 
| A picture tells a thousand words.
| 		Stego
| 
| 
|      -----BEGIN GEEK CODE BLOCK-----
|      Version: 3.1
|      GCS/IT/S d--() s+: a-- C++++(++)$ ULS+++@ P++@ L+(++)$ E- W+(+++)$
|      N++$ !o K-? w++(+++)$ !O+>++ !M !V PS+(+++)@ PE(++)@ Y++$ PGP@ t+@
|      5++@ X++>$ R+++>$ tv+@ b+@ DI+++>$ D+++@>$ G@ e++@>++++ h r* y+ 
|      ------END GEEK CODE BLOCK------
| 


-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume