In addition to the political fight, the computer community can help by continuing to develop simple and easily-available forms of strong encryption, which will truly protect the public in the decades to come. The OECD has adopted Guidelines for Cryptography Policy, setting out principles to guide countries in formulating their own policies and legislation relating to the use of cryptography. The Recommendation which came before the governing body of the OECD, the Council, on Thursday 27 March, is a non-binding agreement that identifies the basic issues that countries should consider in drawing up cryptography policies at the national and international level. The recommendation culminates one year of intensive talks to draft the Guidelines. The need for Guidelines emerged from the explosive worldwide growth of information and communications networks and technologies and the requirement for effective protection of the data which is transmitted and stored on those systems.
Cryptography is a fundamental tool in a comprehensive data security system.
Cryptography can also ensure confidentiality and integrity of data and provide mechanisms for authentication and non-repudiation for use in electronic commerce. Governments want to encourage the use of cryptography for its data protection benefits and commercial applications, but they are challenged to draft cryptography policies which balance the various interest at stake, including privacy, law enforcement, national security, technology development and commerce. International consultation and co-operation must drive cryptography policy because of the inherently international nature of information and communications networks and the difficulties of defining and enforcing jurisdictional boundaries in the new global environment. The Guidelines are intended to promote the use of cryptography, to develop electronic commerce through a variety of commercial applications, to bolster user confidence in networks, and to provide for data security and privacy protection. Some OECD Member countries have already implemented policies and laws on cryptography, and many countries are still developing them.