Info

• the T-shirt

• The 'munitions' mailing label. Postscript file and MS word doc for mailing label sheets, Duncan Frissell's mailing labels as printed in the New York Times.

• Why it is illegal to export 3 lines of perl code from the US. EFF documents The ITAR regulations in full (large 368k), see sections 120.17, and 121.1 (Category XIII) - the sections quoted on the shirt.

• Crypto use, and import is illegal in France (French text) without a license.

• Crypto in Europe. There is currently what appears to be an attempt to impose key escrow in Europe, the Council of Europe recommendation has been interpreted by some as recommending a clipper like scheme. However the Council of Europe has no statutory powers, the recommendation is just that, a recommendation. Also it's interpretation is currently unclear. The Bangemann report which was published by the European Union, and hence could be taken to carry more weight, being a document from the EU itself, is ambiguous on the subject, and could be taken either way. To read, both documents could be taken to be implying key escrow, but Finnish civil servant Kaarlo Korvola stated in his memo on the Council of Europe recommendation, that it was analyzed by the EC's Senior Officials' Group for Information Security on 5th October and their spokesperson, David Herson, said that Commission has no plans and no proposal to ban encryption or use key escrow.

  Some more info, euro clipper paper (gzipped postscript), Privacy International's EU-crypto page. Ross Anderson's crypto in Europe paper (unix compressed postscript file). A survey of countries with crypto regulations, another survey (GNU zipped postscript file), another survey.

  If you have any more news or pointers I should add here, please email me <adam@cypherspace.org>, there is still much doubt as to what is going on!

• The amount of $s (100s of millions) ITAR costs the US software industry in lost trade every year. Steve Walker (TIS) congressional testimony, SPA study of foreign availability of crypto, CPSR panel industry opinion, TIS/SPA crypto survey

• Software Key Escrow (son of Clipper), more government access to master keys nonsense. NIST meeting was widely viewed as an attempted government white wash, attendees went, but disclaimed that they were only there on the understanding that they were 'there to register their protest', and didn't want their attendance misconstrued to signify approval in any way. Reports from attendees Carl Ellison, and Pat Farrell, pages contain scanned NSA 'sample solution' documents, plus other NIST docs from the two day meeting.

• What you can do about it? Who to complain to, and who is lobbying against this nonsense. EFF, EPIC, CDT, VTW, CPSR, SPA, ACLU, Libertarian Party Privacy International

• A crypto and security appliciation resource page. Pointers to security software, encryption libraries, on-the-fly disk encryptors for DOS/windows/unix/mac platforms (like the "doublespace" compressed file systems, only encrypting rather than compressing), where to get PGP, the de-facto internet email encryption program, cypherpunks remailers, symmetric and asymmetric key cipher descriptions. Basically a very complete set of online information. All of the software is located outside the US, so no export restrictions apply whether you are inside or outside the US.

• Phil Zimmermann author of PGP, was investigated for "making pgp available in a form in which it could be exported". He didn't export it btw, they just don't like him, because some unknown third party exported it, and the NSA can't eavesdrop on peoples email when they use PGP.