Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!think.com!snorkelwacker.mit.edu!stanford.edu!UUNET.UU.NET!nss1!cjr
From: nss1!cjr@UUNET.UU.NET (Chris Riddick)
Newsgroups: comp.protocols.kerberos
Subject: Re: DES and export
Message-ID: <9104092026.aa04160@nss1.UUCP>
Date: 9 Apr 91 20:26:42 GMT
Sender: news@shelby.stanford.edu (USENET News System)
Organization: Internet-USENET Gateway at Stanford University
Lines: 16

Let me clarify something since several readers have asked me about it.

First, any cryptographic product (H/W or S/W) to be exported MUST have
an export license from the Office of Munitions Control of the
Department of State.

Second, I do not know of any document that says explicitly that you may
export to Canada (or others).  Export licenses are granted on a
case-by-case basis.  The exported must satisfy the Department of State and
whatever requirements they feel apply to the product.

I apologize for over-simplifying the issue.  Until the U.S Government
develops a consistent and realistic position on DES-based products,
we will all have to take these issues one at a time.

Chris Riddick