> American export law says only 64-bit DES. You have to enable strong
> encryption.
>
> Default is 56 bits.
Regardless of what silliness the US establishment dabbles in and
subsequently embarasses itself with, both Sun and IBM still ship with JCE
restrictions.
Until recently, I supported an application that is shipped with the IBM SDK
and required no restrictions on the IBM JCE Provider - do you know how many
times I have asked the question, "have you installed the Unrestricted JCE
Policy Files?" - more than 7.
--
Tony Morris
http://tmorris.net/
>> American export law says only 64-bit DES. You have to enable strong
>> encryption.
[quoted text clipped - 13 lines]
> See http://en.wikipedia.org/wiki/Export_of_cryptography and
> http://rechten.uvt.nl/koops/cryptolaw/.
EJP - 16 Mar 2006 01:35 GMT
> Regardless of what silliness the US establishment dabbles in and
> subsequently embarasses itself with, both Sun and IBM still ship with JCE
> restrictions.
Agreed, but these are import restrictions, not US govt export restrictions.
On Wed, 15 Mar 2006 23:36:59 GMT, EJP
<esmond.not.pitt@not.bigpond.com> wrote, quoted or indirectly quoted
someone who said :
>This information is many years out of date.
>
>Since 2000, 'Any crypto of any key length can be exported [from the USA]
>under a license exception, after a technical review, to non-government
>end users in any country except the seven "terrorist countries". Exports
>to governments can be approved under a license.'
That is assumption 1.6 Java is working under. Sun can't very well
handle special exemptions, and I can hardly imagine anyone without a
serious masochistic streak applying for one.
Heavens, a lady got arrested by the homeland goons for paying off her
credit card. That was considered suspiciously unAmerican.
The practical solution is to leave the paranoiod feds lie and get your
software from Australia. see http://mindprod.com/jgloss/jce.html

Signature
Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.
EJP - 20 Mar 2006 07:01 GMT
> That is assumption 1.6 Java is working under. Sun can't very well
> handle special exemptions, and I can hardly imagine anyone without a
> serious masochistic streak applying for one.
Hang on, it is Sun doing the exporting ... and Sun who have the export
licence ... and Sun who have built in the unlimited strength
jurisdiction mechanism. There are further steps you can take along this
path, but today you can ship this:
Algorithm Maximum Key Size
DES 64
DESede *
RC2 128
RC4 128
RC5 128
RSA 2048
* (all others) 128
and if you download the unlimited strength policy all restrictions are
off. See http://java.sun.com/products/jce/javase.html#UnlimitedDownload.
There are still restrictions in Sun's JCE *implementation* but use another!