DOC obstructs encryption export again - Non USA crypto base again ?

[Julian H. Stacey]

"Poul-Henning Kamp" wrote:
> In message <201410211451.s9LEpbEc023384 at fire.js.berklix.net>, "Julian H. Stacey
> " writes:
> 
> >How can FreeBSD best re-segregate crypto components of its repository again,
> >ready to move crypto components outside the USA, as USA DOC imperils again ?
> >[...]
> >  http://www.theregister.co.uk/2014/10/17/intel_subsidiary_crypto_export_fine/
> >    "US government fines Intel's Wind River over crypto exports"
> 
> As far as I have been able to uncover, this settlement is about a
> commercial closed source component, using specific hardware-crypto-assist,
> for which no programming details have been made publically available.
> 
> That means that WR cannot fly under the Wassenaar Arrangement "in the
> public domain" carveout, and I guess somebody there overlooked that little
> detail.
> 
> We on the other hand make everything we do available, so we're solidly
> inside that carveout.
> 
> For details see: bottom of page 3 "GENERAL SOFTWARE NOTE" and
> the definition of "in the public domain" at the bottom of page 208
> in this document:
> 
>     http://www.wassenaar.org/controllists/2013/WA-LIST%20%2813%29%201/WA-LIST%20%2813%29%201.pdf

Thanks for the URL Poul-Henning, For info for others:

] P.3:
] GENERAL SOFTWARE NOTE
] The Lists do not control "software"
] which is any of
] the following:
] ...
] 2. "In the public domain"; or
] ...
] P.208
] GTN "In the public domain"
] GSN This means "technology" or "software" which has been made available
] ML 22 without restrictions upon
] its further dissemination.
] Note Copyright restrictions do not remove "technology" or "software"
] from being "in the public domain". 


> In other words Julian:  Don't panic.
> 
> Worst case, we'll move the entire svn server out of USA.

Good, can relax a bit then, Thanks :-)


PS I've since read:
http://lists.gnupg.org/pipermail/gnupg-users/2014-October/051182.html

> ITAR has a couple
> of nice commonsense exceptions.  (See, e.g., ITAR 120.10 (5): ITAR "does
> not include information concerning general scientific, mathematical, or
> engineering principles commonly taught in schools, colleges, and
> universities or information in the public domain.")
> 
> Unfortunately, those exceptions aren't enough to save you from really
> expensive legal bills.

https://en.wikipedia.org/wiki/International_Traffic_in_Arms_Regulations
Shows ITAR as USA national regs.
I researched the ref. ITAR 120.10 (5) & wrote to gnupg-users at gnupg.org

Cheers,
Julian
-- 
Julian Stacey, BSD Linux Unix C Sys Eng Consultant Munich http://berklix.com
 Indent previous with "> ".  Interleave reply paragraphs like a play script.
 Send plain text, not quoted-printable, HTML, base64, or multipart/alternative.