Re: Non-US Crypto HW

[Alex de Joode <usura@zedz.net>]

On Tue, Jun 04, 2002 at 11:27:10AM +0200, Wouter Slegers wrote:
> On Mon, Jun 03, 2002 at 02:35:05PM +0200, Xander Soldaat wrote:
> > On Monday 03 June 2002 13:25, Theo de Raadt wrote:
> > > Many people outside the USA have succeeded at buying these cards from
> > > these guys, and are using them with OpenBSD.
> > I realise this. My problem is a little more complex than just getting 
> > the hardware from the US. My problem is the fact that the company I am 
> > currently working for cannot export US based hardware to the countries 
> > involved (supposed axis of evil and that sort of thing).
> A cautionary note on the legal aspects:
> If the clients are in countries on the banned list for the BXA, they are
> very likely also on the forbidden lists for all other countries that
> follow the Wassenaar agreement (for further information, see
> http://www.wassenaar.org/ and Bert-Jaap Koops Cryptolaw survey at
> http://rechten.kub.nl/koops/cryptolaw/). Although widely ignored, export
> of high-grade (as in: >56-bit keys) crypto devices like these is nearly
> always restricted and subject to export laws, including in The
> Netherlands where you seem to be based.
> This also includes shipping "crypto with a hole" i.e. trying to
> circumvent these rules by building a system that can do "high-grade"
> crypto by simply adding a component, which you are describing.
> In short: this is dangerous legal ground you are treading.

A dutch company called 'Pijnenburg' used to make cryptostuff.
http://www.pcc.pijnenburg.nl/e-commerce.html

However they were takenover last year by a US company, called Safenet.
As this company is based in Baltimore I guess you can guess where most
of their cryptojocks served ... (http://www.safenet-inc.com/).

-- 
Alex de Joode
ZED-ZED-dot-NET					http://zedz.net