19 May 1999
From: "Taewook KIM" <alwinks@cybik.com> To: <jya@jya.com> Subject: Korean Crypto Policy (April 30, 1999) Date: Thu, 20 May 1999 00:29:12 +0900 Dear Sir, I think this will be so helpful to you. The Korean NSA, NIS (National Intelligence Service) has announced its policy towards the cryptography last April 30, 1999. Through its own FAQ board, the NIS implicitly made it clear to use cryptography in the private sector. As you know, the Korean Government has hesitated so far to publish its own crypto policy and the NIS is the very head of crypto policy of Korea. I think it reflects the small and right movement of the Korean government. I translate this into English. You can find the original text in Korean at http://www.nis.go.kr/w0/inquery.view_content?n_category_no=1&n_question_no=13 ==================== Translated into English ==================== The Korean NSA, NIS made clear its own crypto policy through its own FAQ board. Q. I have to use cryptography for the security of the computer system. Should I declare or get any approval from the NIS for the cryptography program? A. No. The NIS is responsible only for the public sector, including the government and its agencies. The NIS does not control the use of cryptography in the private sector. You don't have to declare or get any approval or license from the NIS for the electronic commerce application. The work of the NIS includes the crypto policy of public sector according to the National Intellegence Service Act, Decree of Security Procedures, and Decree of Information and Security Procedure Plans. The NIS now makes every efforts for you to use freely the cryptography in secure circumstances. Truly, Taewook KIM