Re: PGP Export license?

Evan Jeffrey (
Thu, 29 May 1997 16:44:17 -0500

>Has anyone been able to make heads or tails of what PGP is now allowed to
>export? Their website (and has some vague press releases about
>this new news... Whatever it is they're allowed to export, it can only go
>to a few US subsidiaries overseas. The "problem" is that they don't say
>anything more detailed than "128 bit or strong encryption."
>My best guess is that it's limited to 128 bit RC4/5 based algorithms. 128
>bit RSA keys are pathetically weak, hardly even encryption. So it's got to
>be 128 bits of symmetric cipher keys. This begs the question of why *128*
>bits? Assuming there's no flaw in RC4/5 (or whatever), anything above 100
>or so bits should be secure.

PGP uses the 128 bit IDEA algorhithm with a one time pad to encrypt the
message, then encrypts the IDEA key with RSA. I assume that they are
refering to that.

Evan Jeffrey

Let us go. Let us leave this festering hell hole. Let us think the
unthinkable, let us do the undoable. Let us prepare to grapple with the
ineffable itself, and see if we may not eff it after all.
--Dirk Gently