NSA ECC Certicom Licenses

I attended a Cryptographic Interoperability Brief at the DoD/IC Information
Assurance Symposium this week and asked questions about ECC IPR and the NSA
Certicom Licenses. An NSA representative made an interesting claim. She said
that NSA lawyers assert that the NSA Certicom licenses can be used to
implement ECC in COTS products without any distribution restrictions as long
as they are available for National Security implementations. This still
requires that the vendor get a license from NSA, but is a different position
than I have heard in the past.  I will see if I can track down anything in
writing.

 

 

Regards,

Rob Miller

 

 

 

_____________________

Robert D. Miller, CISSP, CISA, PMP

The MITRE Corporation

Lead Infosec Engineer

Secure Operations

 

rdmiller@mitre.org - (443) 695-1857

 

CIIS/G025