Encryption Laws

Well what are you exporting, software or hardware that is encrypted?

We are trying to get the law on taking encrypted hard drives to Russia and I cant find anything solid, we have taken encrypted disks back and forward from the US many times without any problems, that doesnt mean it's right though!
 
I heard something that if its stopped by customs and they cant read it you have x ammount of days to give it to you or they will destroy it. I know the US goverment gets abit anal over encrypting stuff.
 
Currently I believe there is no restriction when taking encrypted data into the US, the encryption can be as strong as you want.

That doesn't mean they won't ask you for the keys if they want though :p
 
Last edited:
if you don't give them the keys they will burn your eyes with a soldering iron

might find more info at encryption-freedom website, there is a small movement starting up, demanding freedom to encrypt data.

there is a paradox of encryption realy. the intelligence agencies restrict encryption technology so they can keep on top of it for "national security" reasons, but then in doing so, everyone is using easily crackable encryption. When everyone should be using a minimum of 2048bit latest technology encryption. Most of the software offers a weak 256bit + backdoors like bit locker lol.
 
Last edited:
if you don't give them the keys they will burn your eyes with a soldering iron

might find more info at encryption-freedom website, there is a small movement starting up, demanding freedom to encrypt data.

there is a paradox of encryption realy. the intelligence agencies restrict encryption technology so they can keep on top of it for "national security" reasons, but then in doing so, everyone is using easily crackable encryption. When everyone should be using a minimum of 2048bit latest technology encryption. Most of the software offers a weak 256bit + backdoors like bit locker lol.

groen, 256bit encryption is by no means weak in the slightest. AES-256 is one of the strongest symmetric ciphers out there, and there is an absolute minimal chance of a known weakness being built into the algorithm. Please get your facts right, everyone is not using easily crackable encryption as you put it. 9 times out of 10 the encryption is top notch, it's how it's used and implemented that is the fail point.

OP: This wiki listing might help you, it indicates the correct government bodies you should liaise with anyway.

It's a bit of a grey area, the best thing you can do is to get legal advice from the correct departments before hand. Being as AES is an open source well documented algorithm, I don't expect you would have too many problems.
 
Last edited:
groen, 256bit encryption is by no means weak in the slightest. AES-256 is one of the strongest symmetric ciphers out there, and there is an absolute minimal chance of a known weakness being built into the algorithm. Please get your facts right, everyone is not using easily crackable encryption as you put it. 9 times out of 10 the encryption is top notch, it's how it's used and implemented that is the fail point.

Thanks, for that. I wanted to say something but didnt have the energy :rolleyes:
 
Thanks for the help guys, I'm glad in a way that it is a grey area and I'm not being stupid!

I've pinged a few emails out so I'll see what happens
 
Just incase anyone is ever searching for Encryption and Russia I will post the answer to my question. CESG got back to me this morning:

Long and short of it is dont take encryption tools into Russia, you need a license and the laws are complicated.
 
Back
Top Bottom