But their legislation also requires key recovery for encryption products that are stronger. However, McCain is not singularly committed to S. 909 in its current form, although national security concerns remain paramount. Pialorsi could not say, however, to what extent McCain might compromise on key recovery although she said he is meeting with the industry and national security agencies to try to forge a consensus. At the press briefing, Goodlatte expressed confidence that differences between the House and Senate could be worked out. Several senators, including Senate Majority Leader Trent Lott, R-Miss., support the Goodlatte bill.
Current regulations permit anyone within the U.S. to use any strength encryption.
There are no restrictions on the export of encryption technology that is 40-bit DES or less. Products using up to 56-bit encryption require the exporter to obtain a license and present a business plan showing he or she is going to implement a key recovery system by December 1998. U.S. companies can use any strength encryption in their foreign branches as long as they institute a key recovery system. However, all financial institutions have been cleared to export 128-bit encryption technology without key recovery. BSA President Robert Holleyman Tuesday cited a study by International Data Corporation, a private research firm, estimating that electronic commerce could dramatically increase if everyone were able to use strong encryption.