Bernstein v. United States

Bernstein v. United States
Great Seal of the United States (obverse).svg: U.S. Government US DC NorCal.gif: · Public domain · source
Litigants	Daniel J. Bernstein v. United States
Court	United States District Court for the Northern District of California; United States Court of Appeals for the Ninth Circuit
Decided	1999 (Ninth Circuit decision); 1996 (district court preliminary injunction)
Citations	176 F.3d 1132 (9th Cir. 1999); 945 F. Supp. 1279 (N.D. Cal. 1996)
Judges	Marilyn Hall Patel (district); Harriet Miers? [Note: include judges relevant to appellate panel]
Keywords	Cryptography, International Traffic in Arms Regulations, First Amendment, export controls

Bernstein v. United States

Bernstein v. United States was a landmark legal challenge to United States export control policy concerning cryptographic software brought by cryptographer Daniel J. Bernstein against United States Department of State, later involving United States Department of Commerce and federal officials, that raised First Amendment questions under the United States Constitution and prompted changes to the International Traffic in Arms Regulations and Export Administration Regulations. The litigation produced influential decisions in the United States District Court for the Northern District of California and the United States Court of Appeals for the Ninth Circuit that intersected with policy debates involving Phil Zimmermann, Bruce Schneier, Whitfield Diffie, and institutions such as MIT, Stanford University, and Berkeley. The case catalyzed legislative and administrative responses by entities including the United States Department of Defense, National Security Agency, and members of the United States Congress.

Background

In the early 1990s cryptographer Daniel J. Bernstein, a doctoral student at University of California, Berkeley, sought to publish source code and an academic paper describing the Snuffle cipher and a cryptographic protocol he developed, while affiliated with scholars and researchers connected to RSA Security, Electronic Frontier Foundation, Free Software Foundation, and cryptography conferences like Crypto (conference), which brought into tension the International Traffic in Arms Regulations administered by the United States Department of State and the Export Administration Regulations administered by the United States Department of Commerce. Prior controversies involving figures such as Phil Zimmermann and incidents like the Zimmermann PGP investigation had already made cryptographic export policy a focal point for civil liberties advocates including the American Civil Liberties Union and technology companies such as Sun Microsystems and Microsoft Corporation. Bernstein’s plans to publish source code and distribute cryptanalytic tools raised issues for federal agencies including the National Institute of Standards and Technology and the National Security Agency.

Litigation and Procedural History

Bernstein filed suit in the United States District Court for the Northern District of California challenging State Department restrictions and seeking declaratory and injunctive relief; the case involved advocacy groups including the Electronic Frontier Foundation and university counsel from University of California. In 1996 District Judge Marilyn Hall Patel granted a preliminary injunction against enforcement of the export controls as applied to Bernstein’s source code, prompting appeals to the United States Court of Appeals for the Ninth Circuit and involvement by amici curiae such as ACLU, Computer Professionals for Social Responsibility, and technology industry participants like Sun Microsystems and Netscape Communications Corporation. The Ninth Circuit addressed standing, justiciability, and constitutional claims, producing opinions that engaged legal authorities including the First Amendment jurisprudence developed in cases like New York Times Co. v. Sullivan and administrative law precedents from the Administrative Procedure Act.

Legal Issues and Holdings

The litigation focused on whether programming source code constitutes protected speech under the First Amendment and whether export controls under the International Traffic in Arms Regulations and Export Administration Regulations were unlawfully vague or unconstitutional as applied to cryptographic expression; the courts considered precedents from cases involving national security and information control such as disputes linked to the Atomic Energy Act and regulatory schemes enforced by the Department of State and the Department of Commerce. The Ninth Circuit held that source code can qualify as expressive conduct entitled to First Amendment protection and that prior restraint principles constrained categorical restraints on publication, citing legal authorities and doctrinal frameworks from cases like Near v. Minnesota and later-analogous decisions. The courts also examined statutory interpretation of export control classifications administered under the Arms Export Control Act and the interagency delineation between the Department of State and the Department of Commerce.

Impact on Export Controls and Cryptography Policy

Following the decisions, federal agencies including the Department of State, Department of Commerce, and National Security Agency revisited regulatory policy, contributing to rulemaking that shifted many cryptographic items from munitions control under the International Traffic in Arms Regulations to dual-use classification under the Export Administration Regulations, with policy input from members of the United States Congress and advisory committees such as the Industry Advisory Council and stakeholders from RSA Security, IBM, Intel Corporation, and academic centers like MIT Computer Science and Artificial Intelligence Laboratory. The litigation accelerated decontrol and liberalization of cryptography exports, influenced standards-setting organizations such as the Internet Engineering Task Force and the World Wide Web Consortium, and intersected with debates over surveillance and privacy involving agencies like the Federal Bureau of Investigation and civil rights advocates including ACLU.

Subsequent Developments and Legacy

Bernstein’s challenge contributed to a broader shift in law, policy, and practice: cryptographic source code increasingly has been treated as protected expression, export controls were substantially relaxed, and scholarly and commercial publication of encryption software became widespread across platforms including projects from Free Software Foundation, OpenBSD, and corporations like Google and Apple Inc.. The case influenced later litigation and policy debates involving digital rights and national security, echoing in matters before the Supreme Court of the United States, statutory initiatives in the United States Congress, and regulatory adjustments by the Department of Commerce and international coordination through bodies like the Wassenaar Arrangement. Bernstein’s litigation remains cited in discussions at forums such as DEF CON, Black Hat (conference), and academic symposia at Stanford Law School and Harvard Law School about the intersection of constitutional law, technology, and export control regimes.

Category:United States Court of Appeals for the Ninth Circuit cases Category:Cryptography controversies Category:United States First Amendment case law