A market-driven approach to the development and use of cryptographic methods will ensure that solutions keep pace with changing technology, the demands of users, and with the evolving threat environment. Standards for Cryptographic Methods a. Standards for cryptographic methods should be voluntary and international. The development of voluntary, international standards should be led by business, with governments' participation. Licenses to intellectual property necessary for compliance with a standard should be made available under reasonable terms and conditions and on a non-discriminatory basis. Government Responsibilities and Regulation a.
Individual countries have the sovereign power to protect public safety and national security.
Therefore, cryptography policies should be consistent with national and international law. However, there is a need for international cooperation, as incompatible national policies will not meet the needs of users and their global technologies and applications. The framework for controls imposed by governments for public safety and national security reasons should be clear, publicly available, and to the extent possible, made consistent by international agreement. Governments should process requests under the controls expeditiously and efficiently. Key Management a. Consistent with the principle of free choice, individuals and commercial entities should be free to choose key management systems that address their security requirements.