crypto

In the US, it's illegal to host ECDSA keys in the cloud on behalf of a user without a license.

𝓵𝓲𝓿𝓲𝓷𝓰 𝓽𝓱𝓮 𝓮𝓷𝓭𝓵𝓮𝓼𝓼 𝓼𝓾𝓶𝓶𝓮𝓻 • building @buoy 🛟 • pfista.com

check out Bureau of Industry and Security, International Traffic in Arms Regulations (ITAR), Export Administration Regulations (EAR)

symmetric algorithms exceeding 56-bit key lengths (and certain asymmetric algorithms like ECDSA) typically require classification under the EAR.

by requiring licenses, the government can regulate who has access to strong encryption technologies, potentially limiting adversaries' abilities to use such technologies against U.S. interests.

if crypto technology is classified as a defense article, ITAR requires a license for export, which can be more restrictive than EAR.