I guess this is a little off-topic, but no more than some recent
Can someone illuminate me (and possibly others) on the exportability
of RC4-based systems.
Here's what I know.
There are several VPN products around using RC4 encryption. In all
cases the "international" version uses 40-bits and the "domestic"
Now my questions:
1) Is 128-bit RC4 exportable from the US to a gov't/financial body?
2) If I have a head office in the US and branch offices elsewhere in
the world what are the export restrictions?
3) If I have a branch office in the US and I am a gov't body, what
if any, are the export restrictions?