When Encryption Was a Munition

The question was simple and its answer reshaped the internet: is code something you write, or something you export?

The Story

Phil Zimmermann released PGP in 1991 and it spread worldwide. In 1993 he became the subject of a federal criminal investigation over the export of cryptographic software under arms-control rules. The investigation closed in 1996 without charges.

Meanwhile the US government promoted the Clipper chip, an encryption device with a key held in escrow for law-enforcement access. Researchers found flaws in its design and the proposal collapsed under industry and civil-liberties opposition.

The legal argument moved to the First Amendment. In Bernstein v. United States, a mathematician challenged the export rules over his own encryption code. Courts engaged with the claim that source code is expression, and the rules were substantially relaxed in 1999 and 2000.

The outcome is the reason ordinary software can ship strong encryption today — and the reason the same argument returns every few years in a new form.

What We Know

Verified, documented facts.

Cryptographic software was controlled as a munition under US export regulations for much of the 1990s.
Phil Zimmermann was investigated over PGP's international distribution from 1993; the case was dropped in January 1996.
The Clipper chip was announced in 1993; Matt Blaze published a flaw in its escrow mechanism in 1994, and the initiative was abandoned.
Bernstein v. United States challenged the export controls on First Amendment grounds; US export rules were significantly loosened in 1999–2000.

What Remains Unknown

Open questions — not answered by the record.

How much the relaxed rules were driven by litigation versus commercial pressure from a growing internet economy.
Where the legal line now sits for future systems — the debate over lawful-access mechanisms has never been settled, only postponed.

Sources

← Back to the Shadow Files