The Cypherpunk Manifesto and the mailing list

Wonder

1. Why did the US government treat encryption software as a weapon of war?
2. How can source code be protected by free speech laws while being banned from export?
3. What specific political fight required a decentralized network to survive?

Explore

1. In 1988, Timothy C. May wrote ‘The Crypto Anarchist Manifesto,’ arguing that cryptography would make government intervention in commerce obsolete. In 1992, May joined Eric Hughes and John Gilmore in the San Francisco Bay Area to launch a mailing list for this idea. Jude Milhon coined the name ‘cypherpunk’ for the group, blending cypher (cipher) with punk. The list quickly became a hub for cryptographers, programmers, and libertarians who believed privacy was a survival skill, not a luxury.
2. On March 9, 1993, Eric Hughes published ‘A Cypherpunk’s Manifesto.’ It declared that privacy is necessary for an open society in the electronic age. Hughes defined privacy as ‘the power to selectively reveal oneself to the world,’ distinguishing it from secrecy. Its best-known line was ‘Cypherpunks write code.’ This document provided the philosophical backbone for a movement that intended to build tools rather than just debate theory.
3. The US government viewed strong cryptography as a strategic threat. Under the International Traffic in Arms Regulations (ITAR), encryption was classified as a munition, subject to strict export controls. Phil Zimmermann released PGP (Pretty Good Privacy) in 1991, and US federal prosecutors investigated him from 1993 to 1996 for export violations. The case was dropped without charges, but it showed that publishing encryption software could be treated as exporting a weapon.
4. In April 1993 the White House announced the Clipper chip, an NSA-designed encryption chip for telephones with built-in key escrow, so that law enforcement holding a warrant could obtain the keys. In 1994 Matt Blaze, then at AT&T Bell Laboratories, showed that the escrow field was protected by only a 16-bit checksum, so a user could forge it and keep the encryption while defeating the escrow. The proposal was abandoned amid public outcry and technical criticism.
5. The legal fight peaked in Bernstein v. United States. Daniel Bernstein, then a graduate student at Berkeley, wanted to publish the source code of his Snuffle cipher and was told he needed an export license; he sued. In 1999 a Ninth Circuit panel held that source code is expression protected by the First Amendment. The opinion was withdrawn for rehearing and never became binding precedent; the government relaxed its export rules in 2000, and the case ended without a final ruling. It still gave the cypherpunk argument, that publishing code is speech, its most prominent legal hearing.
6. The movement produced more than legal victories; it produced people. Adam Back, Wei Dai, Hal Finney, and Nick Szabo were active on the list or in its orbit during this period. List members ran anonymous remailers that passed email through several servers to hide its sender; Finney wrote one of the first. These individuals carried the technical and philosophical groundwork of the 1990s into the 2000s. When Satoshi Nakamoto posted the bitcoin whitepaper in 2008, he sent it to the cryptography mailing list, a descendant of this community, and built directly on its work on privacy and digital cash.

Key facts

Exercise nine, six, three, one

Fact check

Dates, figures and claims checked against the published sources listed below.

• E. Hughes, 'A Cypherpunk's Manifesto' (1993)
• T.C. May, 'The Crypto Anarchist Manifesto' (1988)
• S. Levy, Crypto: How the Code Rebels Beat the Government—Saving Privacy in the Digital Age (2001)
• Bernstein v. United States, 9th Cir. (1999)