"Neulinger, Nathan R." wrote:
> I knew I remembered reading something about this. Should probably be
> verified but this was on slashdot a while back:
>
> http://slashdot.org/articles/99/01/19/1255234.shtml
>
> (unfortunately in french, but on the governments web site)
> http://www.internet.gouv.fr/francais/textesref/cisi190199/decis1.htm
>
> I don't know much more about this, but thought I'd pass that along.
>
That is specifically in regard to use, but doesn't clearly state that
*import* is legal. For that, see below. And there are some details.
http://www.internet.gouv.fr/francais/textesref/cryptodecret99200.htm
http://www.internet.gouv.fr/francais/textesref/cryptodecret99199.htm
....
Fait � Paris, le 17 mars 1999.
Lionel Jospin
ANNEXE au d�cret n�99-200
OP�RATIONS dispens�es de toutes formalit�s pr�alables: utilisation,
importation
MOYENS OU PRESTATIONS
1. Mat�riels ou logiciels offrant un service de
confidentialit�
mis en oeuvre par un algorithme dont la clef est d'une
longueur inf�rieure ou �gale � 40 bits.
2. Mat�riels ou logiciels offrant un service de
confidentialit�
mis en oeuvre par un algorithme dont la clef est d'une
longueur sup�rieure � 40 bits et inf�rieure ou �gale �
128
bits, � condition, soit que lesdits mat�riels ou
logiciels aient
pr�alablement fait l'objet d'une d�claration par leur
producteur, un fournisseur ou un importateur, soit que
lesdits mat�riels ou logiciels soient exclusivement
destin�s
� l'usage priv� d'une personne physique.
-------------
IOW, if it's not for use by a single person, the importer must
"declare" the import.
The form of the declaration is described here:
http://www.internet.gouv.fr/francais/textesref/cryptoarrete4.htm
The declaration must name the algorithms used, and the purpose, but does
not need to declare the keys.
This is annoying, but not insurmountable. And anyway, it's irrelevant
to IBM, since *they* are not going to be the ones hypothetically
importing anything, it's going to be some private French citizen.
Oh, hang it. It's boneheaded, but completely unimportant. If that's
the sop they had to throw some clueless lawyers to get them on board, I
suppose it was worth it.
