Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Jul 1995 10:36:48 -0700 (PDT)
From:      "Rodney W. Grimes" <rgrimes@gndrsh.aac.dev.com>
To:        tweten@frihet.com
Cc:        sef@kithrup.com, security@freebsd.org, mark@grondar.za, pst@stupi.se
Subject:   Re: secure/ changes...
Message-ID:  <199507261736.KAA25735@gndrsh.aac.dev.com>
In-Reply-To: <199507261251.FAA08981@tale.frihet.com> from "David E. Tweten" at Jul 26, 95 05:51:33 am

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> 
> Rodney W. Grimes writes:
> > I would need 2 professional opionions
> > before I would import DES code, 1 from a lawyer specilizing in import/export
> > law, preferably with some sited Federal rulings from cases, and the 2nd from
> > a US Customs officier specializing in munitions.
> > 
> > Those are 2 opinions I could go get if I so desired to import DES, however
> > I have no desire to waste my time or energy to do this as I already have
> > a legally obtained copy of DES.
> > 
> > Simply put, anything less than what I outline above is here say.
> 
> The following is not hearsay.
> 
> In my capacity as a software project leader for NASA, under a beta program, I 
> have distributed about a dozen copies of a Unix package called Portable Batch 
> System (PBS).  It does no crypto because stub DES routines are included, but 
> its documentation contains references to off-shore sources of DES routines 
> which may be substituted if a beta site actually wants some security.  The 
> reason for this twisted state of affairs is to permit exportation of PBS
> after 
> the beta program is over, and after COSMIC (NASA's software distribution arm) 
> takes PBS off its temporarily sensative (read "new") technology list.

I will agree, the above statement is not here say.

> Our beta sites (currently a dozen or so) have been importing the DES 
> "munition" as our documentation suggests for over a year. Neither we nor they 
> have experienced any problem,

And even that much of this paragraph is not here say.  I have driven at
well in excess of 150MPH down a freeway in Oregon and was not stopped
or fined for doing so in any way, on numerious occasions, does that mean it
is ``legal''.  No, it simply means I did not get caught.

> because importation of crypto is not restricted.

In my book that is here say, you are not in a possition to definativly
make that statement.  Why?  Well, your not a lawyer, your not an import
specialist, your not a US Customs officier, your not a representive of
the AFT, your not a State Department official.  You are a ``software project
leader for NASA'', that does not make you an authority on us import law.

You can not site (nor can I) chapter and verse from the appropriate documents
to assert that statement one way or the other, therefor it is ``here say''
and or an opinion.

I will caution you that giving ``legal'' advice with out the proper
credintials is a violation of most states BAR regulations, but consult
an attorney for full details on that issue.  :-)

-- 
Rod Grimes                                      rgrimes@gndrsh.aac.dev.com
Accurate Automation Company                 Reliable computers for FreeBSD



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199507261736.KAA25735>