Division

Note 3: Cryptography Note

5A002, 5D002.a.1., 5D002.b. and 5D002.c.1. do not control items as follows:

1. a..

   Items that meet all of the following:

   1. 1..

      Generally available to the public by being sold, without restriction, from stock at retail selling points by means of any of the following:

      1. a..

         Over-the-counter transactions;

      2. b..

         Mail order transactions;

      3. c..

         Electronic transactions; or

      4. d..

         Telephone call transactions;

   2. 2..

      The cryptographic functionality cannot easily be changed by the user;

   3. 3..

      Designed for installation by the user without further substantial support by the supplier; and

   4. 4..

      When necessary, details of the goods are accessible and will be provided, upon request, to the competent authorities of the Member State in which the exporter is established in order to ascertain compliance with conditions described in paragraphs 1. to 3. above;

2. b..

   Hardware components or ‘executable software’, of existing items described in paragraph a. of this Note, that have been designed for these existing items, meeting all of the following:

   1. 1..

      "Information security" is not the primary function or set of functions of the component or ‘executable software’;

   2. 2..

      The component or ‘executable software’ does not change any cryptographic functionality of the existing items, or add new cryptographic functionality to the existing items;

   3. 3..

      The feature set of the component or ‘executable software’ is fixed and is not designed or modified to customer specification; and

   4. 4..

      When necessary as determined by the competent authorities of the Member State in which the exporter is established, details of the component or ‘executable software’ and details of relevant end-items are accessible and will be provided to the competent authority upon request, in order to ascertain compliance with conditions described above.

   Technical Note:

   For the purpose of the Cryptography Note, ‘executable software’ means "software" in executable form, from an existing hardware component excluded from 5A002 by the Cryptography Note.

   Note:‘Executable software’ does not include complete binary images of the "software" running on an end-item.