Re: Export restrictions / SSH session key

"quebert" == quebert <isquereal@xxxxxxxx> writes:

quebert> Hello, i have a question regarding the export restrictions
quebert> (in Europe) when using SSH. We would like to implement / use
quebert> SSH in one of our products. The only cipher which we would
quebert> like to support is DES, nothing else.

quebert> I generate the host key using
--> ssh-keygen -q -t rsa1 -f host.key -C '' -N '' <--
quebert> and copy it to the server (a small embedded box). This is
quebert> also possible for the customer.

quebert> My questions now: Does the host key also fall under the
quebert> export restrictions, if we install it fix on the device?
quebert> Does the by RSA (in SSHv1) generated session key (used for
quebert> the cipher, DES in our case), fall under the export
quebert> restrictions?

As Nico said, ask a lawyer. However, the hostkeys in SSH-2 are used only
for signing, not encryption, and I believe there are no restrictions on
signature algorithms.

--
Richard Silverman
res@xxxxxxxx

.

Relevant Pages

  • Re: Export restrictions / SSH session key
    ... We would like to implement / use SSH in one of our ... The only cipher which we would like to support is DES, ... Does the host key also fall under the export restrictions, ... They do vary from country to ...
    (comp.security.ssh)
  • Export restrictions / SSH session key
    ... We would like to implement / use SSH in one of our ... The only cipher which we would like to support is DES, ... Does the host key also fall under the export restrictions, ...
    (comp.security.ssh)