OpenLegislation

Paragraph 5A2

Changes not yet applied. Later legislation changes this provision in ways not yet written into the text below:

Equipment, Assemblies and Components

5A002

Systems, equipment, application specific electronic assemblies, modules or integrated circuits for information security, as follows, and other specially designed components therefor:

a.

Designed or modified to use cryptography employing digital techniques to ensure information security;

b.

Designed or modified to perform cryptanalytic functions;

c.

Designed or modified to use cryptography employing analogue techniques to ensure information security;

  • except:

    1. 1.

      Equipment using fixed band scrambling not exceeding 8 bands and in which the transpositions change not more frequently than once every second;

    2. 2.

      Equipment using fixed band scrambling exceeding 8 bands and in which the transpositions change not more frequently than once every ten seconds;

    3. 3.

      Equipment using fixed frequency inversion and in which the transpositions change not more frequently than once every second;

    4. 4.

      Facsimile equipment;

    5. 5.

      Restricted audience broadcast equipment;

    6. 6.

      Civil television equipment;

d.

Designed or modified to suppress the compromising emanations of information-bearing signals;

  • Note: Head d. of this entry does not specify equipment specially designed to suppress emanations for health or safety reasons.

e.

Designed or modified to use cryptographic techniques to generate the spreading code for spread spectrum or the hopping code for frequency agility systems;

f.

Designed or modified to provide certified or certifiable multilevel security or user isolation at a level exceeding Class B2 of the Trusted Computer System Evaluation Criteria (TCSEC);

g.

Communications cable systems which are designed or modified to use mechanical, electrical or electronic means to detect surreptitious intrusion.

  • Note: This entry does not specify:

    1. a.

      Personalized smart cards using cryptography restricted for use only in equipment or systems as follows:

      1. 1.

        Excluded from control under sub-heads c.1. to c.6. of entry 5A002;

      2. 2.

        Excluded from control under heads b. to e. of this Note; or

        1. a.

          Cellular radio equipment or systems specially designed for cryptographic operation, provided any message traffic encryption capability specified in entry 5A002 contained in such equipment or systems is irreversibly disabled;

        2. b.

          Access control equipment, such as automatic teller machines, self-service statement printers or point of sale terminals, which protects password or personal identification numbers (PIN) or similar data to prevent unauthorised access to facilities but does not allow for encryption of files or text, except as directly related to the password or PIN protection;

        3. c.

          Data authentication equipment which calculates a Message Authentication Code (MAC) or similar result to ensure no alteration of text has taken place, or to authenticate users, but does not allow for encryption of data, text or other media other than that needed for the authentication;

        4. d.

          Cryptographic equipment specially designed, developed or modified for use in machines for banking or money transactions, such as automatic teller machines, self-service statement printers, point of sale terminals, or equipment for the encryption of interbanking transactions, and intended for use only in such applications;

    2. b.

      Equipment containing fixed data compression or coding techniques;

    3. c.

      Receiving equipment for radio broadcast, pay television or similar restricted audience television of the consumer type, without digital encryption and where digital decryption is limited to the video, audio or management functions;

    4. d.

      Portable (personal) or mobile radiotelephones for civil use, e.g., for use with commercial civil cellular radiocommunications systems, containing encryption, when accompanying their users;

    5. e.

      Decryption functions specially designed to allow the execution of copy-protected software, provided the decryption functions are not user-accessible.