Re: Stream Cipher Transform -- revisited

Tatu Ylonen <ylo@ssh.fi> Wed, 31 July 1996 07:33 UTC

Received: from relay.hq.tis.com by neptune.TIS.COM id aa05791; 31 Jul 96 3:33 EDT
Received: by relay.hq.tis.com; id DAA06568; Wed, 31 Jul 1996 03:35:51 -0400
Received: from sol.hq.tis.com(192.33.112.100) by relay.tis.com via smap (V3.1.1) id xma006566; Wed, 31 Jul 96 03:35:22 -0400
Received: from relay.hq.tis.com by tis.com (4.1/SUN-5.64) id AA14000; Wed, 31 Jul 96 03:34:55 EDT
Received: by relay.hq.tis.com; id DAA06561; Wed, 31 Jul 1996 03:35:21 -0400
Received: from ssh.fi(194.100.44.97) by relay.tis.com via smap (V3.1.1) id xma006548; Wed, 31 Jul 96 03:35:04 -0400
Received: from pilari.ssh.fi (pilari.ssh.fi [192.168.2.1]) by muuri.ssh.fi (8.7.5/8.7.3) with ESMTP id KAA20361; Wed, 31 Jul 1996 10:36:55 +0300 (EET DST)
Received: (from ylo@localhost) by pilari.ssh.fi (8.7.5/8.7.3) id KAA18037; Wed, 31 Jul 1996 10:36:52 +0300 (EET DST)
Date: Wed, 31 Jul 1996 10:36:52 +0300
Message-Id: <199607310736.KAA18037@pilari.ssh.fi>
From: Tatu Ylonen <ylo@ssh.fi>
To: "Terry L. Davis, Boeing Information & Support Services, Bellevue, WA" <tld5032@commanche.ca.boeing.com>
Cc: Germano Caronni <caronni@tik.ee.ethz.ch>, ipsec@TIS.COM, skip-info@tik.ee.ethz.ch, markson@incog.com, dpalma@netcom.com, Project SKIP <skip@tik.ee.ethz.ch>, Burkhard Stiller <stiller@tik.ee.ethz.ch>, Bernhard Plattner <plattner@tik.ee.ethz.ch>
Subject: Re: Stream Cipher Transform -- revisited
In-Reply-To: <9607301455.AA21468@commanche.ca.boeing.com>
References: <199607031242.OAA10521@kom30.ethz.ch> <9607301455.AA21468@commanche.ca.boeing.com>
Organization: SSH Communications Security, Finland
Sender: ipsec-approval@neptune.tis.com
Precedence: bulk

> 3) For now, regardless of our personal views, exportability of a
> solution is very important.  It seems likely that ciphers may be more
> generally exportable and having more exportable options would appear
> to be win.

The United States does not allow exporting anything that a determined
college kid could not break.  This level of (in)security is not
acceptable.

In some cases, the United States allows export if the effort to break
the encryption is not greater for themselves than what a determined
college kid could break.  While this may provide somewhat more
protection against non-USG attackers, this is not acceptable for the
rest of the world.

    Tatu