14 March 1997

The CSTB/NRC now offers the official ASCII version of the final CRISIS report at:

http://www.nap.edu/readingroom/books/crisis/

10 February 1997: Chapter 1 of this report was reported today to be incomplete and has been fully restored. If others are found incomplete or garbled, please notify <jya@pipeline.com>. Thanks much.

From an announcement by CSTB/NRC on November 8, 1996:

The Computer Science and Telecommunications Board (CSTB) of the National Research Council (NRC) is pleased to announce the availability of its cryptography policy study Cryptography's Role in Securing the Information Society. This report was originally released in pre-publication form on May 30, 1996.

The final printed version of this report can be obtained from the National Academy Press, 1-800-624-6242 or Web site http://www.nap.edu/bookstore. The pre-publication version and the final printed copy differ in that the printed copy contains an index and many source documents relevant to the crypto policy debate; of course, editorial corrections have been made as well.

[The document at this site is] an unofficial ASCII version of the pre-publication report. The official NRC version should become available online in ASCII form in December. [See note above.]

JYA:

We've added the new Appendix N of the final printed version; see below.

The printed version is a handsome and bountiful volume; buy many.

Thanks to NRC, CSTB, report contributors and staff for exemplary work.

Examine the new cryptography export regulations of December 30, 1996.

NRC Report:

Cryptography's Role in Securing the Information Society

Prepublication, May 30, 1996

---

• Preface, Executive Summary and Road Map:
  

Part I  Framing the Policy Issues

• Chapter 1  Growing Vulnerability in the Information Age

• Chapter 2  Cryptography: Roles, Market and Infrastructure

• Chapter 3  Needs for Access to Encrypted Information
  

Part II  Policy Instruments

• Chapter 4  Export Controls

• Chapter 5  Escrowed Encryption and Related Issues

• Chapter 6  Other Dimensions of National Cryptography Policy
  

---

Part III  Policy Options, Findings and Recommendations

• Chapter 7  Policy Options for the Future

• Chapter 8  Synthesis, Findings and Recommendations
  

Appendices

• A  Contributors to the NRC Project on National Cryptography Policy

• B  Glossary

• C  A Brief Primer on Cryptography

• D  An Overview of Electronic Surveillance: History and Current Status

          With two images of tables for Appendix D:

•           Table D1

•           Table D2

• E  A Brief History of Cryptography Policy

• F  A Brief Primer on Intelligence

• G  The International Scope of Cryptography Policy

• H  Summary of Important Requirements for a Public-Key Infrastructure

• I  Industry-Specific Dimensions of Security

• J  Examples of Risks Posed by Unprotected Information

• K  Cryptographic Applications Programming Interfaces

• L  Laws, Regulations, and Documents Relevant to Cryptography (This is now Appendix N in the final printed version, with 187 additional pages of cited documents and is available here.)

• M  Other Looming Issues Related to Cryptography Policy (Appendix L in final printed version.)

• N  Federal Information Processing Standards (Appendix M in final printed version.)

• Index of 11 pages of final printed version not included here.