ben> I suspect that there are people around who are going to disagree on what
ben> can and can't be exported, though, and I really am not at all sure how
ben> we can judge who is correct. For starters, we already see one camp that
ben> says "any source in OpenSSL is unexportable", and another that says
ben> "non-crypto sources (e.g. ASN.1) are exportable". I have a feeling
ben> someone has also said that docco is unexportable except in printed form
ben> (which, of course, patches are, too, aren't they? Perhaps we should just
ben> find volunteers willing to transcribe faxed patches?).
Hmm, the transfer of Kerberos 4 from MIT to Australia illustrates what
people think is freely exportable and what is not: all crypto code
was removed, and also all the code that did direct calls to the crypto
code (it is argueable if this was necessary or not. Those parts are
called "crypto-with-holes"). Eric Young (if I remember correctly)
then added his own crypto code to that crippled Kerberos distribution
(which also included docs), and Kerberos 4 eBones was born.
"Crypto-with-holes" (which means software where only the crypto
routines have been left out, for example source that you need to link
with SSLeay to have working at all) is said by some to be covered by
the US export restrictions. However, from the texts of the bills, I
couldn't see that restriction, and the same goes for a whole bunch of
americans I've talked to.
So, this serving as an example, I'd say that more or less anything is
permitted by the US folks, except to touch the actual crypto stuff
(like anything in crypto/des/, crypto/bf/, crypto/idea/,... you get
the idea...).
Me? The only thing I really care about is not to get in trouble
whenever I travel to the states, not that I really think that's ever
going to happen.
--
Richard Levitte \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Vice Chairman and \ S-161 43 BROMMA \ T: +46-8-26 52 47
Redakteur @ Stacken \ SWEDEN \ or +46-709-26 34 95
Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED]
Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
