Here's my case. We have written app for Android smartphones which allows users to exchange secured cipher messages. For key-exchange we're using elliptic curve 112 bits, for messaging we're using DES 56 bits. We have chosen weak enough cryptography in order to satisfy all kind of limitations applied to cryptographic methods/algorithms and so on. Messages encrypted from sender to recipient (along whole channel).

Question: is it legal? Let's say for U.S. or EU countries? To my knowledge if algorithms confirms to Wassenaar Arrangement it's safe enough to use them.

Am I right? Or there're some "hidden string"?

closed as off-topic by user10211, Scott Pack, Rory Alsop Nov 6 '13 at 14:28

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Not a good idea to get legal advice from a bunch of guys on the internet. Consult a lawyer. – user10211 Nov 6 '13 at 13:59
  • Sure I will do, but sometimes bunch of guys are also useful :) – barmaley Nov 6 '13 at 14:02
  • First, as Terry said, you should consult a lawyer you trust for legal questions. Second, why even bother encrypting if your crypto is weak? What are you trying to accomplish? – atk Nov 6 '13 at 14:03
  • BTW: I've tried to consult with 2 or 3 lawyers but no of them was able to help me, since they even do not understand topic, saying "what a hell is 56 bits"? – barmaley Nov 6 '13 at 14:03
  • 3
    This question appears to be off-topic because it is about getting legal advice. Consult a lawyer instead. – user10211 Nov 6 '13 at 14:03