Export of cryptography in the United States

The export of cryptography in the United States is the transfer from the United States to another country of devices and technology related to cryptography.

Since World War II, many governments, including the U.S. and its NATO allies, have regulated the export of cryptography for national security considerations, and, as late as 1992, cryptography was on the U.S. Munitions List as an Auxiliary Military Technology.^[1]

In light of the enormous impact of cryptanalysis in World War II, it was abundantly clear to these governments that denying current and potential enemies access to cryptographic systems looked to be militarily valuable. They also wished to monitor the diplomatic communications of other nations, including the many new nations that were emerging in the post-colonial period and whose position on Cold War issues was regarded as vital.^[2]

Since the U.S. and U.K. had, they believed, developed more advanced cryptographic capabilities than others, the intelligence agencies in these countries had a notion that controlling all dissemination of the more effective crypto techniques might be beneficial.

The First Amendment made controlling all use of cryptography inside the U.S. difficult, but controlling access to U.S. developments by others was thought to be more practical — there were at least no constitutional impediments.

Accordingly, regulations were introduced as part of munitions controls which required licenses to export cryptographic methods (and even their description); the regulations established that cryptography beyond a certain strength (defined by algorithm and length of key) would not be licensed for export except on a case-by-case basis. The expectation seems to have been that this would further national interests in reading 'their' communications and prevent others from reading 'ours'. This policy was also adopted elsewhere for various reasons.

The development, and public release, of Data Encryption Standard (DES) and asymmetric key techniques in the 1970s, the rise of the Internet, and the willingness of some to risk and resist prosecution, eventually made this policy impossible to enforce, and by the late 1990s it was being relaxed in the US, and to some extent (e.g., France) elsewhere. As late as 1997, NSA officials in the US were concerned that the widespread use of strong encryption will frustrate their ability to provide SIGINT regarding foreign entities, including terrorist groups operating internationally. NSA officials anticipated that the American encryption software backed by an extensive infrastructure, when marketed, was likely to become a standard for international communications.^[3] In 1997, Louis Freeh, then the Director of the FBI, said

For law enforcement, framing the issue is simple. In this time of dazzling telecommunications and computer technology where information can have extraordinary value, the ready availability of robust encryption is essential. No one in law enforcement disputes that. Clearly, in today's world and more so in the future, the ability to encrypt both contemporaneous communications and stored data is a vital component of information security.
As is so often the case, however, there is another aspect to the encryption issue that if left unaddressed will have severe public safety and national security ramifications. Law enforcement is in unanimous agreement that the widespread use of robust non-key recovery encryption ultimately will devastate our ability to fight crime and prevent terrorism. Uncrackable encryption will allow drug lords, spies, terrorists and even violent gangs to communicate about their crimes and their conspiracies with impunity. We will lose one of the few remaining vulnerabilities of the worst criminals and terrorists upon which law enforcement depends to successfully investigate and often prevent the worst crimes.
For this reason, the law enforcement community is unanimous in calling for a balanced solution to this problem. ^[4]

Others^[who?] as well feel that the export controls in place in the last half of the 20th century discouraged incorporation of widely known cryptographic tools into commercial products, particularly personal computer operating systems, and are a root cause of the present crisis in information security, aside from interfering with U.S. trade in such products. They observe that many of the advances, including asymmetric key cryptography and many of its algorithms, were already public in any case.

History

Cold War era

In the early days of the Cold War, the U.S. and its allies developed an elaborate series of export control regulations designed to prevent a wide range of Western technology from falling into the hands of others, particularly the Eastern bloc. All export of technology classed as 'critical' required a license. CoCom was organized to coordinate Western export controls.

Two types of technology were protected: technology associated only with weapons of war ("munitions") and dual use technology, which also had commercial applications. In the U.S., dual use technology export was controlled by the Department of Commerce, while munitions were controlled by the State Department. Since in the immediate post WWII period the market for cryptography was almost entirely military, the encryption technology (techniques as well as equipment and, after computers became important, crypto software) was included as a Category XIII item into the United States Munitions List. The multinational control of the export of cryptography on the Western side of the cold war divide was done via the mechanisms of CoCom.

By the 1960s, however, financial organizations were beginning to require strong commercial encryption on the rapidly growing field of wired money transfer. The U.S. Government's introduction of the Data Encryption Standard in 1975 meant that commercial uses of high quality encryption would become common, and serious problems of export control began to arise. Generally these were dealt with through case-by-case export license request proceedings brought by computer manufacturers, such as IBM, and by their large corporate customers.

PC era

Encryption export controls became a matter of public concern with the introduction of the personal computer. Phil Zimmermann's PGP cryptosystem and its distribution on the Internet in 1991 was the first major 'individual level' challenge to controls on export of cryptography. The growth of electronic commerce in the 1990s created additional pressure for reduced restrictions. Shortly afterward, Netscape's SSL technology was widely adopted as a method for protecting credit card transactions using public key cryptography.

SSL-encrypted messages used the RC4 cipher, and used 128-bit keys. U.S. government export regulations would not permit crypto systems using 128-bit keys to be exported.^[5] At this stage Western governments had, in practice, a split personality when it came to encryption; policy was made by the military cryptanalysts, who were solely concerned with preventing their 'enemies' acquiring secrets, but that policy was then communicated to commerce by officials whose job was to support industry.

The longest key size allowed for export without individual license proceedings was 40 bits, so Netscape developed two versions of its web browser. The "U.S. edition" had the full 128-bit strength. The "International Edition" had its effective key length reduced to 40 bits by revealing 88 bits of the key in the SSL protocol. Acquiring the 'U.S. domestic' version turned out to be sufficient hassle that most computer users, even in the U.S., ended up with the 'International' version,^[6] whose weak 40-bit encryption could be broken in a matter of days using a single personal computer. A similar situation occurred with Lotus Notes for the same reasons.

Legal challenges by Peter Junger and other civil libertarians and privacy advocates, the widespread availability of encryption software outside the U.S., and the perception by many companies that adverse publicity about weak encryption was limiting their sales and the growth of e-commerce, led to a series of relaxations in US export controls, culminating in 1996 in President Bill Clinton signing the Executive order 13026 ^[7] transferring the commercial encryption from the Munition List to the Commerce Control List. Furthermore, the order stated that, the software shall not be considered or treated as "technology" in the sense of Export Administration Regulations. This order permitted the United States Department of Commerce to implement rules that greatly simplified the export of commercial and open source software containing cryptography, which they did in 2000^[8].

Current status

As of 2009, non-military cryptography exports from the U.S. are controlled by the Department of Commerce's Bureau of Industry and Security.^[9] Some restrictions still exist, even for mass market products, particularly with regard to export to "rogue states" and terrorist organizations. Militarized encryption equipment, TEMPEST-approved electronics, custom cryptographic software, and even cryptographic consulting services still require an export license^[9](pp. 6–7). Many items must still undergo a one-time review by or notification to BIS prior to export to most countries.^[9] For instance, the BIS must be notified before open-source cryptographic software is made publicly available on the Internet, though no review is required.^[10] Export regulations have been relaxed from pre-1996 standards, but are still complex,^[9] and often require expert legal and cryptographic consultation.^{[citation needed]} Other countries, notably those participating in the Wassenaar Arrangement,^[11] have similar restrictions.^[12]

US export rules

US non-military exports are controlled by Export Administration Regulations (EAR), a short name for the US Code of Federal Regulations (CFR) Title 15 chapter VII, subchapter C.

Encryption items specifically designed, developed, configured, adapted or modified for military applications ( including command, control and intelligence applications) are controlled by the Department of State on the United States Munitions List.

Terminology

Encryption export terminology is defined in EAR part 772.1.^[13] In particular:

• Encryption Component is an encryption commodity or software (but not the source code), including encryption chips, integrated circuits etc.
• Encryption items include non-military encryption commodities, software, and technology.
• Open cryptographic interface is a mechanism which is designed to allow a customer or other party to insert cryptographic functionality without the intervention, help or assistance of the manufacturer or its agents.
• Ancillary cryptography items are the ones primarily used not for computing and communications, but for digital right management; games, household appliances; printing, photo and video recording (but not videoconferencing); business process automation; industrial or manufacturing systems (including robotics, fire alarms and HVAC); automotive, aviation and other transportation systems.

Export destinations are classified by the EAR Supplement No. 1 to Part 740 into four country groups (A, B, D, E) with further subdivisions;^[14] a country can belong to more than one group. For the purposes of encryption, groups B, D:1, and E:1 are important:

• B is a large list of countries that are subject to relaxed encryption export rules
• D:1 is a short list of countries that are subject to stricter export control. Notable countries on this list include China and Russia
• E:1 is a very short list of "terrorist-supporting" countries (as of 2009, includes 5 countries; previously contained six countries and was also called "terrorist 6" or T-6)

The EAR Supplement No. 1 to Part 738 (Commerce Country Chart) contains the table with country restrictions.^[15] If a line of table that corresponds to the country contains an X in the reason for control column, the export of a controlled item requires a license, unless an exception can be applied. For the purposes of encryption, the following three reasons for control are important:

• NS1 National Security Column 1
• AT1 Anti-Terrorism Column 1
• EI Encryption Items is currently same as NS1

Classification

For export purposes each item is classified with the Export Control Classification Number (ECCN) with the help of the Commerce Control List (CCL, Supplement No. 1 to the EAR part 774). In particular ^[9]:

• 5A002 Systems, equipment, electronic assemblies, and integrated circuits for "information security. Reasons for Control: NS1, AT1.
• 5A992 "Mass market" encryption commodities and other equipment not controlled by 5A002. Reason for Control: AT1.
• 5B002 Equipment for development or production of items classified as 5A002, 5B002, 5D002 or 5E002. Reasons for Control: NS1, AT1.
• 5D002 Encryption software. Reasons for control: NS1, AT1.

• used to develop, produce, or use items classified as 5A002, 5B002, 5D002
• supporting technology controlled by 5E002
• modeling the functions of equipment controlled by 5A002 or 5B002
• used to certify software controlled by 5D002

• 5D992 Encryption software not controlled by 5D002. Reasons for control: AT1.
• 5E002 Technology for the development, production or use of equipment controlled by 5A002 or 5B002 or software controlled by 5D002. Reasons for control: NS1, AT1.
• 5E992 Technology for the 5x992 items. Reasons for control: AT1.

An item can be either self-classified, or a classification ("review") requested from the BIS. A BIS review is required for typical items to get the 5A992 or 5D992 classification.

See also

Cryptography portal

• Bernstein v. United States
• Junger v. Daley
• Restrictions on the import of cryptography

References

1. ^ Department of State -- International Traffic in Arms Regulations, April 1, 1992, Sec 121.1
2. ^ Kahn, The Codebreakers, Ch. 19
3. ^ The encryption debate: Intelligence aspects. See reference below, p. 4
4. ^ Statement of Louis J. Freeh, Director, Federal Bureau of Investigation before the Senate Judiciary Committee. July 9, 1997
5. ^ SSL Certificate FAQ - SSL Basics from VeriSign, Inc
6. ^ January 25, 1999 archive of the Netscape Communicator 4.61 download page showing a more difficult path to download 128-bit version
7. ^ US Executive order 13026
8. ^ "Revised U.S. Encryption Export Control Regulations (1/12/00)". EPIC copy of document from US Department of Commerce.. 2000-01-20. http://epic.org/crypto/export_controls/regs_1_00.html. Retrieved 2011-09-29. 
9. ^ ^{a b c d e} Commerce Control List Supplement No. 1 to Part 774 Category 5 Part 2 - Info. Security
10. ^ "U. S. Bureau of Industry and Security - Notification Requirements for "Publicly Available" Encryption Source Code". Bis.doc.gov. 2004-12-09. http://www.bis.doc.gov/encryption/pubavailencsourcecodenofify.html. Retrieved 2009-11-08. 
11. ^ Participating States The Wassenaar Arrangement
12. ^ Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies: Guidelines & Procedures, including the Initial Elements The Wassenaar Arrangement, December 2009
13. ^ EAR Part 772
14. ^ EAR Supplement No. 1 to Part 740
15. ^ EAR Supplement No. 1 to Part 738

External links

• Crypto law survey
• Bureau of Industry and Security — An overview of the US export regulations can be found in the licensing basics page, and a more specific page is dedicated to the export of cryptography.
• Whitfield Diffie and Susan Landau, The Export of Cryptography in the 20th and the 21st Centuries. In Karl de Leeuw, Jan Bergstra, ed. The history of information security. A comprehensive handbook. Elsevier, 2007. p. 725
• Encryption Export Controls. CRS Report for Congress RL30273. Congressional Research Service, ˜The Library of Congress. 2001
• The encryption debate: Intelligence aspects. CRS Report for Congress 98-905 F. Congressional Research Service, ˜The Library of Congress. 1998
• Encryption Technology: Congressional Issues CRS Issue Brief for Congress IB96039. Congressional Research Service, ˜The Library of Congress. 2000
• Cryptography and Liberty 2000. An International Survey of Encryption Policy. Electronic Privacy Information Center. Washington, DC. 2000
• National Research Council, Cryptography's Role in Securing the Information Society. National Academy Press, Washington, D.C. 1996 (full text link is available on the page).