[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re[2]: quick survey




     Ran,
     
     The Department of State, Bureau of Politico-Military Affairs, in 22 
     CFR Part 121.1 Category 13  which addresses cryptographic systems 
     specifically excludes "data authentication which calculates a Message 
     Authentication Code (MAC) or similar result to insure no alteration of 
     text has taken place, or to authenticate users" (Section 1(vi))
     
     Only if the authentication is part of a system where encryption is 
     also being carried out would the MAC come under regulation.
     
     This would seem to conflict with the information you have. Do you have 
     a reference for that regulation?
     
     Gary L. McGreal
     


______________________________ Reply Separator _________________________________
Subject: Re: quick survey
Author:  Ran Atkinson <rja@cisco.com> at INTERNET
Date:    5/17/96 1:27 PM