what you don't know can hurt you


Posted Dec 21, 1999


tags | encryption
SHA-256 | 0ed6191d7e14f845752f4fdd582405dfdf814c4a9b6f1bc6be7964a95136b1ac


Change Mirror Download
<!-- Created with AOLpress/2.0 -->
<TITLE>EFF et al on Bernstein Ruling</TITLE>
7 May 1999
<PRE>Date: Fri, 7 May 1999 07:01:05 -0700
To: privileged-itar@toad.com, eff-all@eff.org, bernstein-announce@toad.com
From: Alex Fowler <afowler@eff.org>
Subject: FINAL: US Crypto Regs. Ruled Unconstitutional

Hash: SHA1

Friday, May 7, 1999

US Export Control Laws on Encryption Ruled Unconstitutional

EFF Sponsored Case Scores Big Victory for Free Speech, Privacy, and
Security on the Internet

&nbsp;&nbsp;&nbsp;&nbsp; Cindy Cohn, McGlashan and Sarrail
&nbsp;&nbsp;&nbsp;&nbsp; (650) 341-2585; <A HREF="mailto:cindy@mcglashan.com">cindy@mcglashan.com</A>
&nbsp;&nbsp;&nbsp;&nbsp; Tara Lemmey, Electronic Frontier Foundation
&nbsp;&nbsp;&nbsp;&nbsp; (415) 436-9993; <A HREF="mailto:tara@eff.org">tara@eff.org</A>
&nbsp;&nbsp;&nbsp;&nbsp; John Gilmore, Electronic Frontier Foundation
&nbsp;&nbsp;&nbsp;&nbsp; (415) 221-6524; <A HREF="mailto:gnu@toad.com">gnu@toad.com</A>

SAN FRANCISCO, CA--The Ninth Circuit Court of Appeals has ruled that the
federal government's restrictions on encryption are unconstitutional,
affirming a lower court's ruling that export control over cryptographic
"software and related devices and technology are in violation of the First
Amendment on the grounds of prior restraint."

"The Court understood the strong First Amendment issues at stake here,"
noted Cindy Cohn, lead counsel for the Bernstein litigation team.&nbsp; "The
decision is thorough and should stand up to further review."

The case has been sponsored by EFF since 1995.&nbsp; "We sponsored Professor Dan
Bernstein's case because of its importance to society, free expression,
electronic commerce, and privacy in the digital world," said Tara Lemmey,
EFF's President and Executive Director.

Encryption, the process of coding and decoding computerized information, is
the most critical technological solution to protecting privacy and keeping
computer networks secure.&nbsp; Acknowledging this point, the court said "[t]he
availability and use of secure encryption may offer an opportunity to
reclaim some portion of the privacy we have lost.&nbsp; Government efforts to
control encryption thus may well implicate not only the First Amendment
rights of cryptographers intent on pushing the boundaries of their science,
but also the constitutional rights of each of us as potential recipients of
encryption's bounty."

The court recognized the case's impact on society by saying "...it is
important to point out that the [Bernstein case] is a suit not merely
concerning a small group of scientists laboring in an esoteric field, but
also touches on the public interest broadly defined."

"The US government has wielded these export controls to deliberately
eliminate privacy for ordinary people," said John Gilmore, co-founder
of EFF.&nbsp; "The controls created wireless phones that scanners can hear,
e-mail that's easy to intercept, and unsecured national infrastructures
that leave us all vulnerable.&nbsp; Misguided national security
bureaucracies use these controls everyday, to damage the nation they
are sworn to protect, and to undermine the constitution they are sworn
to uphold.&nbsp; Today's ruling is a giant step toward a sane policy."

The government, led by Justice Department attorney Scott McIntosh, argued
that the export control laws on encryption are necessary to protect U.S.
national security.&nbsp; Even if the export control laws are in fact regulated
speech, McIntosh argued, if the government's intent was to regulate
something other than publication, it only needed to show that the rules
were "narrowly tailored" to serve a "substantial government interest."&nbsp; The
court disagreed.&nbsp; "[B]ecause the prepublication licensing regime challenged
here applies directly to scientific expression, vests boundless discretion
in government officials, and lacks adequate procedural safeguards, it
constitutes an impermissible prior restraint on speech," wrote the two
assenting judges.

Judge Bright indicated that due to the importance of the case "it may
be appropriate for review by the US Supreme Court."&nbsp; EFF anticipates
that the government will ask for a stay of this ruling pending appeal.
If granted, the stay would prohibit encryption exports even within the
Ninth Circuit's jurisdiction, including all federal courts in
California, Oregon, Washington, Arizona, Montana, Idaho, Nevada,
Alaska, Hawaii, Guam and the Northern Mariana Islands, until the
matter is finally resolved.

Details on the Bernstein case, including information on the lower court's
rulings, are available on the Internet at <A HREF="http://www.eff.org/bernstein">http://www.eff.org/bernstein</A>.

* * * * * * * *

The Electronic Frontier Foundation (<A HREF="http://www.eff.org">http://www.eff.org</A>) is the leading
global organization building the bridge between technical architectures and
legal frameworks to support the rights of individuals in an open society.
Founded in 1990, EFF actively encourages and challenges industry and
government to support free expression, privacy, and access in the
information society.&nbsp; The Electronic Frontier Foundation maintains the 4th
most-linked-to Web site in the world.

&nbsp; Alexander Fowler
&nbsp; Director of Public Affairs
&nbsp; Electronic Frontier Foundation

&nbsp; E-mail: afowler@eff.org
&nbsp; Tel: 415 436 9333; Fax 415 436 9993

&nbsp; You can find EFF on the Web at <<A HREF="http://www.eff.org">http://www.eff.org</A>>

&nbsp; EFF supports the Global Internet Liberty Campaign
&nbsp; <<A HREF="http://www.gilc.org">http://www.gilc.org</A>>


Version: PGP for Business Security 5.5



Date: Thu, 06 May 1999 17:29:44 -0800
From: Paul Holman <pablos@fortnocs.com>
To: cypherpunks@toad.com
Subject: Cracking DES on US Soil

Hash: SHA1

The Shmoo Group is proud to present...
for the first time...
available legally for download in the United States...
from the jurisdiction of the 9th US Circuit Court of Appeals...

Cracking DES

<<A HREF="http://www.shmoo.com/~pablos/Cracking_DES/">http://www.shmoo.com/~pablos/Cracking_DES/</A>>

"We conclude that the challenged regulations allow the government to
restrain speech indefinitely with no clear criteria for review. As a
result, Bernstein and other scientists have been effectively chilled
from engaging in valuable scientific expression. Bernstein's experience
itself demonstrates the enormous uncertainty that exists over the scope
of the regulations and the potential for the chilling of scientific

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - United States 9th Circuit Court of Appeals

Here's to Scientific Expression

The Shmoo Group

Version: PGP Personal Privacy 6.0.2



Date: Thu, 06 May 1999 21:46:34 -0400
To: hugh@road.toad.com
From: John Young <jya@pipeline.com>
Subject: 1,000 Free Crypto Sites
Cc: cypherpunks@cyberpass.net, gnu@toad.com, cryptography@c2.net

Heeding Hugh Daniels' call today to set up 1,000 US crypto sites
free of unconstituional export restrictions as provided by the
Bernstein opinion, we invite contributions of unlimited-strengh
encryption programs and/or links to such programs for a new
US section for unrestricted cryptography at the International
Cryptography Freedom site:

&nbsp;&nbsp; <A HREF="http://jya.com/crypto-free.htm">http://jya.com/crypto-free.htm</A>


To: John Young <jya@pipeline.com>
cc: hugh@toad.com, cypherpunks@toad.com, gnu@toad.com, cryptography@c2.net
Subject: Exporting crypto from the US? Think first...
Date: Thu, 06 May 1999 19:39:01 -0700
From: John Gilmore <gnu@toad.com>

> Heeding Hugh Daniels' call today to set up 1,000 US crypto sites
> free of unconstituional export restrictions as provided by the
> Bernstein opinion, we invite contributions of unlimited-strength ...

Hugh actually said, "May 1000 crypto web and ftp sites bloom in the
sunlight of this decision...".&nbsp; The catch is, when does the decision
take effect?

The gov't can ask for "en banc" review of the decision by 11 (instead
of 3) judges of the Ninth Circuit, and then (whether or not they get
en banc review), also ask the Supreme Court to look at the case.
Only after they exhaust all these possible delaying tactics will
the opinion become final and unchangeable.

There are difference of opinion among the lawyers I've discussed this
with.&nbsp; I'm no lawyer, so don't believe *my* opinion.&nbsp; Ask your own
lawyer.&nbsp; I'M SERIOUS.&nbsp; Some say the precedent has been set and can be
relied upon.&nbsp; Others say that it has no legal force yet, and may not
have any legal force until after a potential Supreme Court appeal.&nbsp; In
that case, if the government prosecuted you, this decision would be
examined by any lower court judge in the 9th Circuit, but they would
not be legally bound to follow it, though they probably would.&nbsp; Still,
if the government decided you were worth coming after, they might
appeal a lower court loss, and let the case stack up in appeal,
waiting for Bernstein to be finally decided.&nbsp; On the other side, as in
the Berlin Wall, if enough people decide to break a law, it's quite
hard for a bureacracy to arrest or successfully prosecute them all.
On the other other side, a lot of people got smashed by the state
during Mahatma Gandhi's civil disobediences, though the eventual
result was freedom for 800 million people.&nbsp; A final uncertainty is
that tricky gov't prosecutors have been known to try to prosecute
people in other Circuits for things they've done in this Circuit, if
they can come up with some half-plausible reason (like "his packets
may have been routed through this state"); sometimes this succeeds,
and there are people in jail today as a result.&nbsp; In short, as the
gov't attorney in the Bernstein case is reported to have said today,
"It's not over til it's over".

The upshot is that posting crypto source code, even from the 9th
Circuit of the United States, still involves significant risk.&nbsp; The
risk is lower than it was yesterday, but it's still there.

My standing opinion about lawyers is that you should ask them
where the dangers are, and then make your own decision about whether or
not to assume the risks.&nbsp; Everything in life entails some risk, and
each of us must decide what things are worth risking our lives, our
fortunes, and our sacred honor for.&nbsp; I can't tell you what the best
thing to do is -- you must make that decision yourself.



Date: Thu, 6 May 1999 21:33:38 -0400
From: Robert Hettinga <rah@SHIPWRIGHT.COM>
Subject: In light of the Bernstein Ruling...

Is it now officially okay to start up an unrestricted-access cryptographic
archive on US soil?

Robert Hettinga
Robert A. Hettinga <mailto: rah@philodox.com>
Philodox Financial Technology Evangelism <http://www.philodox.com/>
44 Farquhar Street, Boston, MA 02131 USA
"... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'


Date: Thu, 6 May 1999 22:10:41 -0700
From: Cindy Cohn <Cindy@MCGLASHAN.COM>
Subject: Re: In light of the Bernstein Ruling...

At 09:33 PM 5/6/99 -0400, you wrote:
>Is it now officially okay to start up an unrestricted-access cryptographic
>archive on US soil?

NO.&nbsp; Not yet and probably not for a while.

First, the decision is not final for at least 52 days (45 for the govt to seek
rehearing/7 more for mandate to issue), even if the government doesn't seek
cert or rehearing.&nbsp; It could probably be cited as a slip opinion in the
meantime, but is not binding precedent yet.

Second, once it is final, it will only be binding precedent within the 9th

Third, the status pending further review will probably be determined by a
motion for stay within the rehearing period.&nbsp; If such a stay is granted, as it
was below, folks will probably have to wait until it's all over before they can
publish without fear of prosecution.&nbsp; We will oppose any request for a stay, of

This is a long road.&nbsp; We took a big step forward today, but we are not at the
end yet unless the government decides not to seek further rehearing or

Thanks for the kudos and support everyone.&nbsp; Lots of folks on this list have
been involved with the case and of course I'll be hitting all of you for help
us again in the next round :-).


Cindy A. Cohn, <A HREF="mailto:Cindy@McGlashan.com">Cindy@McGlashan.com</A>
McGlashan & Sarrail, P.C.
177 Bovet Road, 6th Floor
San Mateo, CA 94402
(650) 341-2585 (tel)
(650) 341-1395 (fax)


From: Chris Savage <csavage@CRBLAW.COM>
Organization: Cole, Raywid & Braverman
Subject: In light of the Bernstein Ruling...

>Is it now officially okay to start up an unrestricted-access cryptographic
>archive on US soil?

I'd guess not.&nbsp; IIRC the District Court injunction was stayed pending
appeal.&nbsp; Although the decision of the 9th Circuit has issued, I think you
technically have to wait for the "mandate" to issue for the decision to
become law.&nbsp; And one would assume that in due course (today, if they are on
the ball) DOJ will seek to continue the existing stay of the injunction
pending seeking cert.

Chris S.


Date: Thu, 6 May 1999 20:24:36 -0700 (PDT)
From: Max Inux <maxinux@openpgp.net>
To: cypherpunks@algebra.com
Subject: The 9th Circuit

Hash: SHA1

Just so you know, the 9th circuit..

Largest of the 13 federal districts


California, Oregon, Washington, Arizona, Montana, Idaho, Nevada, Alaska,
Hawaii, Guam and the Northern Mariana Islands

Anyone in those regions can.. for now.. export crypto of any
strength (thinking of uploading the source to twofish everywhere I
can.. 256 bit.. hmmm 200 bits over 'legal' max.) legally.

Anyone in those regions i mentioned earlier need a copy of the twofish
source code?&nbsp; I have it here, actually anyone in the world need a copy of
Twofish? ;)

Max <<A HREF="mailto:maxinux@openpgp.net">maxinux@openpgp.net</A>> New PGP Keys Available
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If crypto is outlawed only outlaws will have crypto.
1960 Ford Falcon Tudor Daily Driver, Dont you just wish you had one?

Version: PGP for Personal Privacy 5.0
Charset: noconv



From: <A HREF="http://www.wired.com/news/news/politics/story/19553.html">http://www.wired.com/news/news/politics/story/19553.html</A>

Unless the Justice Department successfully
asks the court to hold off on its ruling,
individuals -- and perhaps companies -- in
the 9th Circuit can now export source code.

"Assuming it's not stayed and you live in
California, Washington, or Oregon, you can
post source code on the Internet without
fear," said <A HREF="http://www.law.miami.edu/~froomkin/bernstein99.htm">Michael Froomkin</A>, a law
professor at the University of Miami School
of Law.

"If this is upheld, we're going to see a lot
more cryptographic use domestically.
People are going to start building it into
products," Froomkin said.


Login or Register to add favorites

File Archive:

May 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    0 Files
  • 2
    May 2nd
    15 Files
  • 3
    May 3rd
    19 Files
  • 4
    May 4th
    24 Files
  • 5
    May 5th
    15 Files
  • 6
    May 6th
    14 Files
  • 7
    May 7th
    0 Files
  • 8
    May 8th
    0 Files
  • 9
    May 9th
    13 Files
  • 10
    May 10th
    7 Files
  • 11
    May 11th
    99 Files
  • 12
    May 12th
    45 Files
  • 13
    May 13th
    7 Files
  • 14
    May 14th
    0 Files
  • 15
    May 15th
    0 Files
  • 16
    May 16th
    16 Files
  • 17
    May 17th
    26 Files
  • 18
    May 18th
    4 Files
  • 19
    May 19th
    17 Files
  • 20
    May 20th
    2 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    6 Files
  • 24
    May 24th
    19 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags


packet storm

© 2022 Packet Storm. All rights reserved.

Security Services
Hosting By