3 ms·

"In 1999, all restrictions on key length were lifted, except for exports to embargoed countries." [1] http://en.wikipedia.org/wiki/56-bit_encryption http://en.

"In 1999, all restrictions on key length were lifted, except for exports to embargoed countries." [1] http://en.wikipedia.org/wiki/56-bit_encryption http://en.wikipedia.org/wiki/56-bit_encryption If you have a source that contradicts this, I'm all ears. I'd just always believed (based on what I've read) that the period from '96-'99 opened up arbitrarily strong crypto (excluding embargos/restrictions to states like North Korea).

yuhong 13y ago
http://www.nytimes.com/2000/01/31/business/worldbusiness/31iht-ttcrypto.2.t.html http://www.nytimes.com/2000/01/31/business/worldbusiness/31i...
- ewoodrich 13y ago
  "Further relaxation of encryption export controls took place in September 1999, when the Clinton Administration announced that encryption items of any key length may now be exported under a license exception, after a technical review, to individuals, firms, and other non-government end-users in any country except for seven state supporters of terrorism.25 After a technical review, retail encryption commodities and software of any key length will also be exportable under a license exception to any recipient in any country except for the same seven destinations." http://www.au.af.mil/au/awc/awcgate/crs/rl30273.pdf http://www.au.af.mil/au/awc/awcgate/crs/rl30273.pdf I think we're pretty much in agreement, considering that the time period between Sep. '99 and Jan '00 is about the length of time for new policy to fully propagate. Regardless, the latter portion of '99 and early '00 was when NSA and State/Export restrictions had been lifted.
dunham 13y ago
I know there are some hoops you have to jump through if you're selling an iOS app that uses encryption, which arguably could include HTTPS. There is a registration/approval process, but an exemption for certain cases. More details here: http://stackoverflow.com/questions/9609901/when-to-check-the-this-application-uses-encryption-box http://stackoverflow.com/questions/9609901/when-to-check-the...
- yuhong 13y ago
  I think it technically applies to any sale of programs that include encryption stronger than 64-bit.

yuhong 13y ago

http://www.nytimes.com/2000/01/31/business/worldbusiness/31iht-ttcrypto.2.t.html http://www.nytimes.com/2000/01/31/business/worldbusiness/31i...

ewoodrich 13y ago
"Further relaxation of encryption export controls took place in September 1999, when the Clinton Administration announced that encryption items of any key length may now be exported under a license exception, after a technical review, to individuals, firms, and other non-government end-users in any country except for seven state supporters of terrorism.25 After a technical review, retail encryption commodities and software of any key length will also be exportable under a license exception to any recipient in any country except for the same seven destinations." http://www.au.af.mil/au/awc/awcgate/crs/rl30273.pdf http://www.au.af.mil/au/awc/awcgate/crs/rl30273.pdf I think we're pretty much in agreement, considering that the time period between Sep. '99 and Jan '00 is about the length of time for new policy to fully propagate. Regardless, the latter portion of '99 and early '00 was when NSA and State/Export restrictions had been lifted.

dunham 13y ago

I know there are some hoops you have to jump through if you're selling an iOS app that uses encryption, which arguably could include HTTPS. There is a registration/approval process, but an exemption for certain cases. More details here: http://stackoverflow.com/questions/9609901/when-to-check-the-this-application-uses-encryption-box http://stackoverflow.com/questions/9609901/when-to-check-the...

yuhong 13y ago
I think it technically applies to any sale of programs that include encryption stronger than 64-bit.