Enhanced CSP and export limitations?

Enhanced CSP and export limitations?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Enhanced CSP and export limitations? hillytt 06-01-2006
Posted by on June 1, 2006, 1:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Do XP operating systems (or 2000 with latest SP) exported to European
countries, currently featuring strong encryption, include all the
features of the Enhanced CSP, i.e. can I expect that applications
developed using Cryptoapi and the Enhanced CSP will work on XP
computers of European customers?
Also, are there any export restrictions on applications developed using
Cryptoapi? I would assume not, as the encryption technology won't work
unless a high encryption os is available. Am I right?
Thank you.

Hillary


Posted by Roger Abell [MVP] on June 2, 2006, 12:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hillary
I see you did not (also) post this to the newsgroup
microsoft.public.security.crypto
but you should
Roger

> Do XP operating systems (or 2000 with latest SP) exported to European
> countries, currently featuring strong encryption, include all the
> features of the Enhanced CSP, i.e. can I expect that applications
> developed using Cryptoapi and the Enhanced CSP will work on XP
> computers of European customers?
> Also, are there any export restrictions on applications developed using
> Cryptoapi? I would assume not, as the encryption technology won't work
> unless a high encryption os is available. Am I right?
> Thank you.
>
> Hillary
>



Posted by S. Pidgorny on June 2, 2006, 5:28 am
If you were  Registered and logged in, you could reply and use other advanced thread options
1. Strong cryptography export restrictions that apply to Windows were lifted
a long while ago - ten years back, at Windows 95 and NT 4.0 times. I
remember times when we had to use smuggled software, or code from Australia
and New Zealand. Since Windows 2000 (1999), I'm all but forgotten about the
issue. At that time, France lifted their _import_ restrictions for strong
encryption.

Here's some additional info:
http://www.rsasecurity.com/rsalabs/node.asp?id=2333

In Russia, use of encryption has to be licensed by FAPSI, a KGB company.
That law is ignored by businesses and people.

2. CryptoAPI functionality doesn't require Microsoft Enhanced Cryptographic
Provider (rsaenh.dll) - just any CSP. You should check for CSP in the code
anyway.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-


> Do XP operating systems (or 2000 with latest SP) exported to European
> countries, currently featuring strong encryption, include all the
> features of the Enhanced CSP, i.e. can I expect that applications
> developed using Cryptoapi and the Enhanced CSP will work on XP
> computers of European customers?
> Also, are there any export restrictions on applications developed using
> Cryptoapi? I would assume not, as the encryption technology won't work
> unless a high encryption os is available. Am I right?
> Thank you.
>
> Hillary
>



Similar ThreadsPosted
Showacls limitations? September 23, 2008, 11:19 am
Re: Win32 security limitations: why? June 16, 2005, 8:40 pm
Re: Win32 security limitations: why? June 16, 2005, 8:48 pm
Win32 security limitations: why? June 16, 2005, 7:58 am
how do i export a cert from my ca? February 16, 2006, 10:27 pm
how to secedit export everything August 10, 2008, 9:41 am
Export IPSec Policies to XML April 25, 2006, 7:04 am
Unable to export Private key July 27, 2006, 6:52 am
tool to export pfx to file October 27, 2008, 8:51 am
Export laws for IE in China and India August 19, 2005, 5:12 pm

The site map in XML format XML site map

Contact Us | Privacy Policy