SSL encryption limitations?

Thread view:

Matthijs Blaas - 13 Mar 2004 16:15 GMT

Hi,

Is it true that it isn't allowed to use the tripple DES & MD5 encryption
scheme in SSL outside the USA?
I want to make an secure connection between an applet I wrote and an
webservice, but someone told me I could only use a 40 bit key algorithm
(which may be pretty insecure?) Could anyone clear things up for me?

Thanks in advance!

Matthijs

Reply to this Message

nobody - 14 Mar 2004 00:36 GMT

> Is it true that it isn't allowed to use the tripple DES & MD5 encryption
> scheme in SSL outside the USA?
> I want to make an secure connection between an applet I wrote and an
> webservice, but someone told me I could only use a 40 bit key algorithm
> (which may be pretty insecure?) Could anyone clear things up for me?

Used to be you couldn't export such encryption software without a
special license. That has been lifted, but there are regulations
requiring notification, etc. for some classes of high encryption. You
can read about the current U.S. laws here:

http://www.bxa.doc.gov/Encryption/regs.htm

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...