Steve Salkin (salkin@mindspring.com)
Tue, 21 Jul 1998 15:53:47 -0400
Hi folx:
I have a question which has to do with implementing cryptosystems, at least
for US
residents.
I have done some crypto work in the past, and now a company outside the United
States is interested in hiring me to work with them on a financial exchange
product
which uses strong public key crypto. They are adamant about the requirement
that I relocate to their location, outside the US, to work on this product.
First of all, I want to know if this is legal for me to do at all. If I
leave the country
and write the code there, does that free me from all the legal problems that
I would have if I wrote it here and emailed it?
Secondly, my understanding from someplace is that if the cryptographic system
is used only for authentication (encrypting the authentication stream etc.)
and not
as a general purpose communication system, then the export restrictions do
not apply.
Can anyone correct this, expand this, or otherwise throw some more light on
it?
And finally, they have a product which is close to completion. If they
email it to me,
I work on it, and email back my changes (either the modified code or just
the alterations)
does that count as exporting it? It's not as if they will send me a system
with no
crypto and I will add it all. I would just be fixing, extending, modifying,
etc. Would
export restrictions apply to source patch files?
Sorry this is so long. I hate dealing with this kind of nonsense, and now
it seems to me
that I may lose a valuable opportunity to this.
Thanks very much.
Steve
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:20:46 ADT