6 October 1999


From: "Axel H. Horns" <Horns@t-online.de>
Organization: PA Axel H. Horns
To: eucrypto@fitug.de
Date: Wed, 6 Oct 1999 19:19:52 +0200
Subject: [FYI] German Minister of Economics and Technology on Crypto

[The unzipped file is in MS-WORD '97 format. Below find an excerpt from that file. -AHH]

http://www.sicherheit-im-internet.de/download/Speech_BM_Mueller.zip

-------------------------------- CUT -------------------------------

Speech by
Dr. Werner Müller,
Federal Minister of Economics and Technology,
on 4 October 1999
at the

Conference on
International Security Solutions Europe
ISSE 1999

in

Berlin

(From the time of delivery, this text is available on:

www.bmwi-info2000.de/sicherheit)

[...]

V. Cryptographic Policy

Ladies and gentlemen:

In this context, permit me to come back to the decision the Cabinet reached on cryptographic policy in June. We have given an important signal to users in commerce, industry, science and the home, as well as to our international partners. Encryption products can be developed, manufactured and used without restriction in Germany.

Encryption products have always tended to be a matter for the state, and are still subject to strict rules or even bans in many countries. However, a responsible policy must ensure the confidentiality of data. The best way to do this is to use strong encryption products. As a result of the decision by the Federal Government, there are no restrictions on the development, manufacture, sale and use of cryptography products. We had vigorous debates on this in Germany during the last parliament. The decision on cryptography represents a milestone for the responsible protection of data by business, the state and the individual. At the same time, we are aware of the legitimate interests of the state and the justice authorities.

Democracy must be able to protect itself. However, we must be realistic, and understand that a ban on cryptography products would not be able to stop criminal or terrorist activity. On the other hand, a ban would represent an excessive intervention in basic constitutional rights.

Ladies and gentlemen:

Competition is taking place in the field of cryptographic IT security between important players, all of whom have recognised its strategic significance.

Other countries have monitored our decision with great interest. From mailing lists on the Internet, I am aware of the level of public interest and support for our decision. France and Britain have now responded by taking steps towards a liberal approach to cryptography.

In the United States, the issue is affected by the question of export restrictions. The Americans have recently announced a relaxation of the rules on the export of cryptography products. I welcome this as a step in the right direction. But we will need to see the details of the changes before we can respond properly. The Wassenaar Arrangement negotiations were concluded in December 1998. We are not unhappy with the outcome, and it seems our view is increasingly being shared.

To demonstrate this, let me show you what has been achieved.

Firstly: in the face of enormous pressure, we prevented - virtually fighting on the front line - the international imposition of key recovery requirements. We did not, and do not, want them. The German Government's cryptographic principles are very clear on this.

Secondly: it used to be the case that everything was controlled and only a few exceptions permitted. That has gone.

Thirdly: for the first time, encryption hardware is not treated worse than encryption software.

Fourthly: I should like to highlight one last point in particular: encryption technology is no longer classified as particularly sensitive under the Wassenaar Arrangement, and is now only mentioned on the basic control list.

Ladies and gentlemen:

This last point is the one you should take home with you. 

-------------------------------- CUT -------------------------------

The German version is under

http://www.sicherheit-im-internet.de/download/Rede_BM_Mueller.zip

For Press Releases, see

http://www.sicherheit-im-internet.de/download/PM_DeutscheKryptoInd.zip

http://www.sicherheit-im-internet.de/download/PM_GermanEncryptionInd.zip