# US Government Technology Restrictions Timeline The fifty-year arc of the U.S. government classifying transformative technologies as weapons and attempting to control their distribution — from [[Public-Key Cryptography]] in the 1970s through semiconductor [[Chip Export Controls]] to frontier AI model restrictions. The pattern repeats with remarkable consistency: a breakthrough technology emerges, the government classifies it as a national security threat, restriction regimes are imposed, legal and market resistance mounts, and the government eventually adapts (sometimes by loosening controls, sometimes by finding new leverage). Each cycle compresses faster than the last. --- ## Era 1: The Crypto Wars (1976–2000) ### The technology emerges | Date | Event | |------|-------| | **1976** | Whitfield Diffie and Martin Hellman publish "New Directions in Cryptography," inventing public-key cryptography. The NSA is alarmed; it had been the sole proprietor of strong encryption. GCHQ later reveals its mathematicians (Ellis, Cocks, Williamson) made the same discovery years earlier but kept it classified | | **1976** | Congress passes the **Arms Export Control Act**. Encryption hardware and software are classified as Category XIII munitions under ITAR — the same legal category as tanks and missiles | | **1977** | The **Data Encryption Standard (DES)** is adopted as a federal standard. Public hearings feature testimony from Diffie and Hellman raising concerns about NSA's involvement and the suspiciously short 56-bit key length | | **1977** | Ron Rivest, Adi Shamir, and Leonard Adleman publish the **RSA algorithm** — the first practical public-key cryptosystem. RSA will become the foundation of internet security | ### Restriction and resistance | Date | Event | |------|-------| | **1991** | Phil Zimmermann releases **PGP** (Pretty Good Privacy) as freeware. The software spreads internationally via the internet. The U.S. Justice Department opens a **three-year criminal investigation** of Zimmermann for illegally exporting munitions — the first major individual challenge to crypto export controls | | **1993** | The Clinton administration introduces the **Clipper Chip** — a government-designed encryption chip for consumer telephones with a built-in "key escrow" backdoor giving law enforcement access to all communications. The proposal galvanizes an unlikely coalition of civil libertarians, cryptographers, and tech companies | | **1994** | AT&T researcher **Matt Blaze** publishes a paper demonstrating a fundamental flaw in the Clipper Chip's escrow mechanism. The proposal is effectively dead | | **1995** | Daniel Bernstein, a UC Berkeley mathematics Ph.D. student, files ***Bernstein v. United States*** challenging encryption export restrictions. He had been told he needed to register as an arms dealer to publish his encryption algorithm | | **1996** | The Justice Department **drops the Zimmermann investigation** without filing charges — a tacit admission that prosecuting someone for publishing software is untenable | | **1996–97** | Cryptographic software is **reclassified** from the State Department's Munitions List (ITAR) to the Commerce Department's Commerce Control List (EAR). Export restrictions remain but shift from "military weapon" framing to "dual-use technology" framing | | **1999** | The Ninth Circuit rules in ***Bernstein v. United States*** that software source code is **speech protected by the First Amendment** and that export restrictions on encryption are an unconstitutional prior restraint | | **1999** | The Clinton administration **removes virtually all restrictions** on the export of retail encryption products, regardless of key length. The Crypto Wars are effectively over; the government lost | | **2000** | The Sixth Circuit rules in ***Junger v. Daley*** that encryption source code is protected speech — reinforcing *Bernstein* from a second circuit | --- ## Era 2: Semiconductors and AI Chips (2018–2025) ### The new chokepoint | Date | Event | |------|-------| | **2018** | Congress passes the **Export Control Reform Act (ECRA)**, codifying U.S. export control powers and adding a novel focus on "emerging technologies" — the statutory foundation for everything that follows | | **2019** | The Commerce Department adds **Huawei** to the Entity List, cutting it off from American chip technology. The first major use of export controls as a technology-denial weapon against a specific Chinese company | | **Oct 2022** | The Biden administration issues **sweeping AI chip export controls** — the most aggressive technology restriction since the Crypto Wars. Bars export of advanced AI GPUs (NVIDIA A100, H100), chipmaking equipment, and related software to China. Restricts U.S. persons from supporting China's advanced-chip industry. National Security Adviser Jake Sullivan frames the strategy as a "small yard, high fence" | | **Oct 2023** | The Commerce Department **expands chip controls** to cover a broader set of chips and semiconductor manufacturing equipment. Closes loopholes that [[NVIDIA]] had exploited by designing compliance-threshold chips (the A800 and H800) specifically to skirt the original rules | | **Dec 2024** | Further restrictions: **140 companies** added to the Entity List; Foreign Direct Product Rule expanded; new controls on high-bandwidth memory and additional technology areas | | **Jan 2025** | The Biden administration publishes the **AI Diffusion Framework** — the first U.S. export control on AI model weights (ECCN 4E091). Creates a tiered system: "green zone" allies get access, China and other adversaries do not. Also publishes a Foundry Due Diligence Rule for chip fabrication | | **May 2025** | The Trump administration **rescinds the AI Diffusion Framework** on the eve of its compliance date, calling it a barrier to American innovation. The model-weight controls are dead; the chip-level restrictions remain | | **Jul 2025** | Trump **reverses the H20 chip ban**, allowing [[NVIDIA]] to resume shipments of its H20 processors to China — three months after halting them in April | | **Dec 2025** | Trump announces a **one-year waiver** of export restrictions on NVIDIA's H200 chips, giving Chinese firms legal access to Nvidia's Hopper line | --- ## Era 3: AI Models as Munitions (2026) ### The frontier model question | Date | Event | |------|-------| | **Apr 2026** | [[Anthropic]] launches **Claude Mythos Preview** through Project Glasswing — the first frontier AI model deployed specifically for cybersecurity vulnerability detection. Roughly 50 initial partners begin scanning codebases. The program eventually expands to ~150 organizations across 15+ countries, finding over 10,000 high/critical-severity flaws | | **Feb 2026** | Defense Secretary [[Pete Hegseth]] demands [[Anthropic]] remove military-use restrictions from its models. Anthropic refuses. Trump **bans Anthropic government-wide** — federal agencies directed to cease using its products ([[Anthropic Government Ban]]). Anthropic sues; partial classified-access restoration later negotiated | | **Jun 1, 2026** | [[Anthropic]] files a **confidential S-1 with the SEC**, beginning its IPO process at a ~$965B valuation | | **Jun 9, 2026** | [[Anthropic]] releases **[[Claude Fable 5]]** — a Mythos-class model with safety guardrails, making it the most capable publicly available AI model. State-of-the-art on nearly all benchmarks (80.3% SWE-Bench Pro) | | **Jun 12, 2026** | The U.S. government issues an **export control directive** ordering Anthropic to suspend all [[Claude Fable 5]] and [[Claude Mythos 5]] access for foreign nationals — including foreign-national employees — citing the discovery of a jailbreak. This is the **first AI-specific export control recall** in U.S. history ([[Anthropic Model Export Directive]]). Anthropic complies but publicly objects, arguing the standard would "halt all new model deployments for all frontier model providers" | | **Jun 27, 2026** | Commerce Secretary [[Howard Lutnick]] signs a **partial restoration**: [[Claude Mythos 5]] access restored for ~100 trusted U.S. companies and federal agencies. [[Claude Fable 5]] remains suspended — the ironic outcome that the restricted model came back before the public one | --- ## The Pattern Each era follows the same arc with compressing timescales: **Cryptography (1976–1999):** 23 years from invention to decontrol. The government classified math as a weapon, tried to prosecute a programmer for publishing code, proposed a backdoor chip, and ultimately lost when courts ruled code is speech and the technology became too essential to suppress. **Semiconductors (2018–2025):** 7 years from statutory authority to policy whiplash. The government built a sophisticated chip-denial regime, then the incoming administration partially dismantled it to favor American companies' revenue over technology denial. The oscillation between restriction and deregulation is itself a form of instability. **AI models (2026):** Weeks from deployment to recall. The government issued its first AI model export control directive within three days of learning about a jailbreak. The speed reflects both the genuine national security stakes (a model that can find vulnerabilities in every major operating system) and the absence of any statutory framework — the directive was issued under general national security authorities, not AI-specific legislation. The through-line: the U.S. government will always try to control transformative technology. Whether it succeeds depends on whether the technology is harder to share than encryption source code (which anyone could copy) but easier to restrict than physical chip-fabrication equipment (which requires billion-dollar facilities). AI models sit somewhere in the middle — and that ambiguity is where the political fight lives. ## See Also - [[Public-Key Cryptography]] — the technology that started the restriction cycle - [[Chip Export Controls]] — the semiconductor-era restrictions - [[Dual-Use AI]] — the framework for AI that serves both civilian and military purposes - [[Claude Fable 5]] · [[Claude Mythos 5]] — the models at the center of the 2026 directive - [[Anthropic Government Ban]] — the February 2026 Pentagon contract ban - [[Anthropic Model Export Directive]] — the June 2026 export control recall - [[Splinternet]] — the broader fragmentation of technology access along national lines - [[Tech Decoupling]] — the geopolitical context - [[CHIPS and Science Act]] — the domestic investment counterpart to export restrictions - [[Harvest Now Decrypt Later]] — why the cryptography stakes haven't gone away