[comp.unix.internals] Is the DES algorythm PD?

anlhille@rose.ucs.indiana.edu (Joseph Hillenburg) (12/27/90)

If the DES enryption algorythm is PD, please send me a copy, and if it's not
too much trouble, these people, too:

tagreen@lothario.ucs.indiana.edu
gandalf%valnet@news.cs.indiana.edu
ken%cguild%valnet@news.cs.indiana.edu

Thanks bunches...

=============================================================================
| -jph		     IMHO: The "H" means "honest!"                          |
| INET: anlhille@ucs.indiana.edu	  UUCP: iuvax!prism.decnet!anlhille |
| BITNET: anlhille@iurose.bitnet	  DECNET: PRISM::ANLHILLE           |
=============================================================================

johnl@iecc.cambridge.ma.us (John R. Levine) (12/27/90)

In article <1990Dec27.004813.25021@news.cs.indiana.edu> you write:
>If the DES enryption algorythm is PD, please send me a copy

The DES algorithm is most definitely PD.  It was published in the Federal
Register, Vol 40 No 149, August 1 1975, pages 32395-32414.  If you're not
familiar with the Federal Register, it's an enormous and generally incredibly
boring journal put out by the government in which is published all of the
government's public notices.  It is not copyrighted; I have a xerox of the DES
on my desk.  Run down to the library and make your own copy.

It is also available as FIPS 46, published by NIST, and ANSI X3.92-1981.  FIPS
are distributed by NTIS.  ANSI distributes their own stuff, you can call them
in New York to get their price.  Neither is free.

I'm not aware of any on-line version of DES.  It'd be a pain to type in, as it
contains lots of subscripts, tables of numbers, and line drawings.  Perhaps
some generous soul can come up with a pic+troff or postscript version.

DES specifies an algorithm that takes a 64 bit plain text and a 56 bit key to
produce a 64 bit encrypted text, and vice-versa.  A related document is FIPS
81 or ANSI X3.106-1983 which defines ways to use DES to encrypt longer
messages.

Regards,
John Levine, johnl@iecc.cambridge.ma.us, {spdcc|ima|world}!iecc!johnl

jfh@rpp386.cactus.org (John F Haugh II) (12/27/90)

In article <9012262049.AA28348@iecc.cambridge.ma.us> johnl@iecc.cambridge.ma.us (John R. Levine) writes:
>In article <1990Dec27.004813.25021@news.cs.indiana.edu> you write:
>>If the DES enryption algorythm is PD, please send me a copy

...

>I'm not aware of any on-line version of DES.  It'd be a pain to type in, as it
>contains lots of subscripts, tables of numbers, and line drawings.  Perhaps
>some generous soul can come up with a pic+troff or postscript version.

Someone in Australia posted a version of DES to the net some time back.
There was also a version from Phil Karn (KA9Q fame).  Unfortunately I
don't think anyone in the US can safely post that code because of
export restrictions (which so far as I know still apply to library
routines which aren't strictly for user authentication purposes ...)
-- 
John F. Haugh II                             UUCP: ...!cs.utexas.edu!rpp386!jfh
Ma Bell: (512) 832-8832                           Domain: jfh@rpp386.cactus.org
"While you are here, your wives and girlfriends are dating handsome American
 movie and TV stars. Stars like Tom Selleck, Bruce Willis, and Bart Simpson."

piet@cs.ruu.nl (Piet van Oostrum) (12/28/90)

There is a public domain, non-USA implementation of the DES algorithm from
someone in Finland. We have it in our archive:

How to get des.tar.Z from the archive at
	Dept. of Computer Science, Utrecht University:

NOTE: In the following I have assumed your mail address is john@highbrow.edu.

    Of course you must substitute your own address for this. This should be
    a valid internet or uucp address. For bitnet users name@host.BITNET
    usually works.  

by FTP: (please restrict access to weekends or evening/night (i.e. between
about 20.00 and 0900 UTC).

    ftp archive.cs.ruu.nl [131.211.80.5]
    user name: anonymous or ftp
    password: your own email address (e.g. john@highbrow.edu)
    cd /pub
    don't forget to set binary mode if the file is a tar/arc/zoo archive,
    compressed or in any other way contains binary data.
    get UNIX/des.tar.Z

by mail-server:

send the following message to
mail-server@cs.ruu.nl (or uunet!mcsun!hp4nl!ruuinf!mail-server):

    begin
    path john@highbrow.edu (PLEASE SUBSTITUTE *YOUR* ADDRESS)
    send UNIX/des.tar.Z
    end

The path command can be deleted if we receive a valid from address in your
message. If this is the first time you use our mail server, we suggest you
first issue the request:
    send HELP
--
Piet* van Oostrum, Dept of Computer Science, Utrecht University,
Padualaan 14, P.O. Box 80.089, 3508 TB Utrecht, The Netherlands.
Telephone: +31 30 531806   Uucp:   uunet!mcsun!ruuinf!piet
Telefax:   +31 30 513791   Internet:  piet@cs.ruu.nl   (*`Pete')

mpledger@cti1.UUCP (Mark Pledger) (12/28/90)

Folks your in luck.  Check out the November 1990 issue of Dr. Dobb's.  Al
Stevens discusses the DES alogrithm and provides his own version of it.  It
is available from Comp-U-Serv if you don't want to type the source in 
your self.  Please note that I haven't tried it yet.  If someone does try
it and it works could they please inform me.  Thanks.



-- 
Sincerely,


Mark Pledger

--------------------------------------------------------------------------
CTI                              |              (703) 685-5434 [voice]
2121 Crystal Drive               |              (703) 685-7022 [fax]
Suite 103                        |              
Arlington, VA  22202             |              mpledger@cti.com
--------------------------------------------------------------------------

anlhille@rose.ucs.indiana.edu (Joseph Hillenburg) (12/29/90)

In article <353@cti1.UUCP>, mpledger@cti1.UUCP (Mark Pledger) writes...
|Folks your in luck.  Check out the November 1990 issue of Dr. Dobb's.  Al
|Stevens discusses the DES alogrithm and provides his own version of it.  It
|is available from Comp-U-Serv if you don't want to type the source in 
|your self.  Please note that I haven't tried it yet.  If someone does try
|it and it works could they please inform me.  Thanks.
| 

Someone sent me a U.S. implementation of DES. I can't post it, but if anyone
from within the U.S. wants a copy, mail me.

| 
|--------------------------------------------------------------------------
|CTI                              |              (703) 685-5434 [voice]
|2121 Crystal Drive               |              (703) 685-7022 [fax]
|Suite 103                        |              
|Arlington, VA  22202             |              mpledger@cti.com
|--------------------------------------------------------------------------
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
|   //     Joseph Hillenburg, Secretary, Bloomington Amiga Users Group        |
| \X/  anlhille@ucs.indiana.edu                     anlhille@iurose.BITNET    |
|      "Have fun folks. It's the last time you'll be seeing this place"       |
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

jgd@csd4.csd.uwm.edu (John G Dobnick) (12/29/90)

> In article <353@cti1.UUCP>, mpledger@cti1.UUCP (Mark Pledger) writes...
> |                     Check out the November 1990 issue of Dr. Dobb's.  Al
> |Stevens discusses the DES alogrithm and provides his own version of it.  It
> |is available from Comp-U-Serv if you don't want to type the source in 
> |your self. 

Silly (and perhaps a bit off the subject) question time:

    I) Does this mean that Dr. Dobb's is now an "export restricted" item,
       and thus can not be mailed to any non-US subscribers?

   II) Does this now mean that Comp-U-Serv must restrict non-US subscriber
       access?

[Well, I _did_ say this was silly.  :-) ]
-- 
John G Dobnick  (JGD2)
Computing Services Division @ University of Wisconsin - Milwaukee
INTERNET: jgd@csd4.csd.uwm.edu             ATTnet: (414) 229-5727
UUCP: uunet!uwm!csd4.csd.uwm.edu!jgd

"Knowing how things work is the basis for appreciation,
and is thus a source of civilized delight."  -- William Safire

bs@marvin.e17.physik.tu-muenchen.de (Bernhard Schneck) (12/31/90)

piet@cs.ruu.nl (Piet van Oostrum) writes:
>There is a public domain, non-USA implementation of the DES algorithm from
>someone in Finland. We have it in our archive:

>How to get des.tar.Z from the archive at
>	Dept. of Computer Science, Utrecht University:

>[...]

Piet goes on and describes how to get that DES package via EMAIL or FTP.

Due to some very intelligent decisions our IP routing to *.nl is via
the US, so I am interested in the legal aspects of FTPing DES from
Utrecht.  As I understand the current situation I could FTP it if IP
routing were via InterEUNet, but it would violate US export
regulations if I use our default routing.

Is this (can this be) correct ????

>Piet* van Oostrum, Dept of Computer Science, Utrecht University,

\Bernhard.
Bernhard Schneck        Internet: B.Schneck@Marvin.E17.Physik.TU-Muenchen.DE
TU Muenchen Physik E17            Postmaster@Physik.TU-Muenchen.DE
8046 Garching           BitNET  : schneck@dgablg5p
West Germany            

mpledger@cti1.UUCP (Mark Pledger) (01/01/91)

jgd@csd4.csd.uwm.edu (John G Dobnick) writes:

>Silly (and perhaps a bit off the subject) question time:

>    I) Does this mean that Dr. Dobb's is now an "export restricted" item,
>       and thus can not be mailed to any non-US subscribers?

>   II) Does this now mean that Comp-U-Serv must restrict non-US subscriber
>       access?

Unfortunately it's a sticky, but relevant issue.  Any other comments ?



-- 
Sincerely,


Mark Pledger

--------------------------------------------------------------------------
CTI                              |              (703) 685-5434 [voice]
2121 Crystal Drive               |              (703) 685-7022 [fax]
Suite 103                        |              
Arlington, VA  22202             |              mpledger@cti.com
--------------------------------------------------------------------------

mjoyce@smiley.mitre.org (01/02/91)

  The reason for export controls on software implementations of DES have
always mystified me.  Here are two observations that fuel my confusion.

   FIPS PUB 46 states: "Software implementations in general purpose
computers are not in compliance with this standard." (reference FIPS PUB 46,
15 January 1977, "Data Encryption Standard," page 2, paragraph "Hardware
Implementation")  How could export controls apply to something that does
not comply with the standard?

  Assuming that software implementations of DES are subject to export
controls, why would the National Institute of Standards and Technology
publish a software implementation of the DES?  Appendix D of FIPS PUB 112
contains a FORTRAN program for passphrase transformation and password
encryption.  A software implementation of DES is provided in the FORTRAN
program (reference FIPS PUB 112, 30 May 1985, "Password Usage," Appendix D). 
FIPS PUB 112 is available from the National Technical Information Service,
U.S. Department of Commerce, Springfield, VA 22161.  The price of FIPS PUB
112 was $15.95 in 1989.  Major credit cards accepted.

            mike

dnichols@uunet.uu.net (DoN Nichols) (01/03/91)

"mjoyce@smiley.mitre.org says:"
> 
> 
>   The reason for export controls on software implementations of DES have
> always mystified me.  Here are two observations that fuel my confusion.
> 
   [...]
> encryption.  A software implementation of DES is provided in the FORTRAN
> program (reference FIPS PUB 112, 30 May 1985, "Password Usage," Appendix D). 
> FIPS PUB 112 is available from the National Technical Information Service,
> U.S. Department of Commerce, Springfield, VA 22161.  The price of FIPS PUB
> 112 was $15.95 in 1989.  Major credit cards accepted.

	Don't expect quick turnaround if you order from them now.  They had
a fire recently, and PCB's were in the transformers.  They are currently
debating whether or not it is safe for the employees to re-enter the
building.  It may be a while. :-)

-- 
Donald Nichols (DoN.)		| Voice (Days):	(703) 664-1585
D&D Data			| Voice (Eves):	(703) 938-4564
Disclaimer: from here - None	| Email:     <dnichols@ceilidh.beartrack.com>
	--- Black Holes are where God is dividing by zero ---