Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Feb 1997 16:13:08 -0500 (EST)
From:      Mark Mayo <mark@quickweb.com>
To:        Mark Murray <mark@grondar.za>
Cc:        security@freebsd.org
Subject:   Re: blowfish passwords in FreeBSD 
Message-ID:  <Pine.BSF.3.94.970217160548.10948A-100000@vinyl.quickweb.com>
In-Reply-To: <199702172025.WAA03791@grackle.grondar.za>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 17 Feb 1997, Mark Murray wrote:

> Mark Mayo wrote:
> > Anways, I'm going to research the Canadian export laws some more, and see
> > how anal my gov. really is. It might be necessary to move the main FreeBSD
> > distribution out of the US if the US gov. doesn't smarten up soon. A site
> > in Europe and one in Canada would server both continents.
> 
> Um - there is already a distribution of crypto for FreeBSD (DES/Kerberos)
> that is _IDENTICAL_ to the USA code. Apart from a short break (FBSD2.0)
> this has been going since about (?) 1993. (Are you there, Geoff?)
> 
> Most Non-USA sites mirror this code.

For DES, yes.... I wasn't really thinking abut the DES distribution, but
for future crypto distributions. The problem is that the 'main' FreeBSD
distribution site (ftp.freebsd.org) cannot export DES or other crypto
software to other coutries - for people in other parts of the world, who
perhaps aren't aware of the problems with the US gov.'s export laws right
now, it can be a little confusing when tey are told at install time that
because they don't live in the US they can't install DES/Kerberos... I
guess maybe the FTP install could be setup to automagically use a non-US
server when the user picks a sensitive crypto package?

Just some thoughts anyways.. Hopefully when the US gov. sees that the
40-bit key was cracked in 3 hours, and the 48-bit key in a couple weeks,
maybe they'll realize how far they have their heads up their asses and
will stop these silly export restrictions on hard-crypto..

-mark

> 
> M
> --
> Mark Murray                PGP key fingerprint = 80 36 6E 40 83 D6 8A 36
> This .sig is umop ap!sdn.                        BC 06 EA 0E 7A F2 CE CE
> 
> 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.94.970217160548.10948A-100000>