what are the risks of having the united states government select a cryptosystem for wide spread commercial use. how could users from outside the united states overcome some or all of these risks? why do cryptologists recommended changing the encryption key from time to time? is it the same reason security experts recommended changing a password from time to time? how can one determine how frequently to change keys or password?