Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Here's my case. We have written app for Android smartphones which allows users to exchange secured cipher messages. For key-exchange we're using elliptic curve 112 bits, for messaging we're using DES 56 bits. We have chosen weak enough cryptography in order to satisfy all kind of limitations applied to cryptographic methods/algorithms and so on. Messages encrypted from sender to recipient (along whole channel).

Question: is it legal? Let's say for U.S. or EU countries? To my knowledge if algorithms confirms to Wassenaar Arrangement it's safe enough to use them.

Am I right? Or there're some "hidden string"?

share|improve this question

closed as off-topic by Terry Chia, Scott Pack, Rory Alsop Nov 6 '13 at 14:28

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

    
Not a good idea to get legal advice from a bunch of guys on the internet. Consult a lawyer. –  Terry Chia Nov 6 '13 at 13:59
    
Sure I will do, but sometimes bunch of guys are also useful :) –  barmaley Nov 6 '13 at 14:02
    
First, as Terry said, you should consult a lawyer you trust for legal questions. Second, why even bother encrypting if your crypto is weak? What are you trying to accomplish? –  atk Nov 6 '13 at 14:03
    
BTW: I've tried to consult with 2 or 3 lawyers but no of them was able to help me, since they even do not understand topic, saying "what a hell is 56 bits"? –  barmaley Nov 6 '13 at 14:03
3  
This question appears to be off-topic because it is about getting legal advice. Consult a lawyer instead. –  Terry Chia Nov 6 '13 at 14:03