ÿWPC¦ B–2ÝårŠñš·…¡µf&ôøXÜ$b< ^1Y~÷»A¬5à{C-[~læeÛ¢{ÜGI> Öµûmnㆢùª0>øÓïï!χg~¢ùÃí÷ÙqSfÙ[©¬ pçŠm¼H»HúÙŽì;¬‹(”g+觱þ 4âòsÓµmUñçôÙi7&Êœ Bgk_äá¬ì½œÐJ¶ÐöP_P°=9èbÓ9JY±nsAî袾÷)VP2ç–Q˜êP OöR¾þ€ÕàÌP—p—Zcc +½?¡œãM.£4øìßÀa¯Öâ*ï7€Eþäáí«ãè5!(õ çÆïL®(°Az€¥ì ‘„cYƒn4õD=ŠºGÀÔáY¡Û„Ëóçâþ…*–ž«7pZhÄZÑ®1™”e>ïáTrÅ7ö ô.‚Òs5:²yü¼[L±ì¼ÂzÈ}eLWf˜ÏêňœŽ7¬‚FUhÙ;ÜÂÉý™eÎ ÏÝIx"g `ж*ç¢bñˆQ¸¦Ù`eñ¨-^éÂwP)ú .Aí*fvF¡vüékÛªd,^;ä+œÖî„}û$ëÂ3vñâ’.UëÑ.`ò†:ʺêLG&¬ªµs& tæHw@ð40DSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSU4N[ %©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©©© 04¯¯¯UNã 01Ʋ²²UNxU.ÆUNôU BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBU<bbbbbbbbbbb ž ‰DŠ‹DŒDŽDD‘D’Že(X‚'3|x’(  Z ‹6Times New Roman Regular™X( ¤T$¡¡Ó  Ó(ÈhH  Z ‹6Times New Roman RegularB?é21, 2, 3,Numbersà  àÚƒÚ1Ú  Ú.Û€Û1, 2, 3,Level 1Level 2Level 3Level 4Level 5(ÈhH  Z6Times New Roman Regular $Verdana(ÈhH  Z 6Times New Roman Regular'ô\ `ô\  `$Times NewRoman>#Ý ƒ¤T!ÝÓ  ÓÝ  Ýñ’ñ›ñ’ñÑ7€™HË™XXdðdÈ7ÑÔ‡XHËXX™XÔÑ  Ññ’ñ›ñ’ññ’ññ’ñÓÓà  àà ` àà ¸ àà  àà h àà À àà  àà p àà È àJanuary€ñ’ñœñ’ñ11,ñ’ñ›ñ’ññ’ññ’ñ€2000à Ð àÐ ° Ðà  àà ` àà ¸ àà  àà h àà À àà  àà p àà È àBilling€Code:€3510„33„PÌñ’ñœñ’ñDEPARTMENTñ’ñ›ñ’ññ’ññ’ñ€OF€COMMERCEÌñ’ñœñ’ñBureauñ’ñ›ñ’ññ’ññ’ñ€of€Export€AdministrationÌñ’ñœñ’ñ15ñ’ñ›ñ’ññ’ññ’ñ€CFR€Parts€734,€740,€742,€770,€772,€and€774€Ìñ’ñœñ’ñ[Docketñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñNo.€000110010„0010„01]ñ’ñ›ñ’ññ’ññ’ñÌñ’ñœñ’ñRIN:ñ’ñ›ñ’ñ€0694„AC11Ìñ’ñœñ’ñRevisionsñ’ñ›ñ’ññ’ññ’ñ€to€Encryption€ItemsÌñ’ñœñ’ñAGENCY:ñ’ñ›ñ’ññ’ññ’ñ€€Bureau€of€Export€Administration,€CommerceÌñ’ñœñ’ñACTION:ñ’ñ›ñ’ññ’ññ’ñ€Interim€final;€request€for€comments.Ìñ’ñœñ’ñÔ#†™XHËXXXHËi#ÔÔ‡XHËXX™XHËÔSUMMARY:ñ’ñ›ñ’ññ’ññ’ñ€This€rule€amends€the€Export€Administration€Regulations€(EAR)€to€allow€theÐ pÀ Ðexport€and€¢reexport£€of€any€encryption€commodity€or€software€to€individuals,€commercial€firms,Ïand€other€non„government€end„users€in€all€destinations.€€It€also€allows€exports€and€¢reexports£€ofÏretail€encryption€commodities€and€software€to€all€end„users€in€all€destinations.€€Post„exportÏreporting€requirements€are€streamlined,€and€changes€are€made€to€reflect€amendments€to€theÏ¢Wassenaar£€Arrangement.€€This€rule€implements€the€encryption€policy€announced€by€the€WhiteÏHouse€on€September€16€and€will€simplify€U.S.€encryption€export€rules.€€Restrictions€on€terroristÏsupporting€states€(Cuba,€Iran,€Iraq,€Libya,€North€Korea,€Sudan€or€Syria),€their€nationals€and€otherÏsanctioned€entities€are€not€changed€by€this€rule.Ô#†™XHËXXXHËS#ÔÐ p&À!$ Ðñ’ñœñ’ñDATES:ñ’ñ›ñ’ññ’ññ’ñ€€This€rule€is€effective€ñ’ñœñ’ñJanuary€14,€2000.ñ’ñ›ñ’ññ’ññ’ñ€€Comments€must€be€received€on€or€before€ñ’ñœñ’ñMayÏ12,€2000.ñ’ñ›ñ’ññ’ññ’ñÌñ’ñœñ’ñADDRESSES:ñ’ñ›ñ’ññ’ññ’ñ€Written€comments€on€this€rule€should€be€sent€to€Frank€J.€Ruggiero,€RegulatoryÏPolicy€Division,€Bureau€of€Export€Administration,€Department€of€Commerce,€P.O.€Box€273,Ð ð-@),d ÐWashington,€DC€20044.€€Express€mail€address:€Frank€J.€Ruggiero,€Regulatory€Policy€Division,ÏBureau€of€Export€Administration,€Department€of€Commerce,€14th€Street€and€Pennsylvania€Ave,ÏN.W.,€Room€2705,€Washington,€DC€20230.Ìñ’ñœñ’ñFORñ’ñ›ñ’ññ’ññ’ñ€FURTHER€INFORMATION€CONTACT:€James€A.€Lewis,€Director,€Office€of€StrategicÏTrade,€at€(202)€482„0092.Ìñ’ñœñ’ñÔ‡XHËXX™XHËÔSUPPLEMENTARYñ’ñ›ñ’ññ’ññ’ñ€INFORMATION:Ð È`  Ðñ’ñœñ’ñBACKGROUND:ñ’ñ›ñ’ññ’ññ’ñÌñ’ñœñ’ñÔ#†™XHËXXXHË #ÔÔ‡XHËXX™XHËÔOnñ’ñ›ñ’ññ’ññ’ñ€September€16,€1999,€the€U.S.€announced€a€new€approach€to€its€encryption€export€controlÐ ˆ  Ðpolicy.€€This€approach€rests€on€three€principles:€a€technical€review€of€encryption€products€inÏadvance€of€sale,€a€streamlined€post„export€reporting€system€and€a€process€that€permits€theÏgovernment€to€review€exports€of€strong€encryption€to€foreign€governments.€€The€full€range€ofÏnational€interests€continue€to€be€served€by€this€new€policy:€supporting€law€enforcement€andÏnational€security,€protecting€privacy€and€promoting€electronic€commerce.€€Encryption€exportÏcontrols€will€be€simplified€and€U.S.€companies€will€have€new€opportunities€to€sell€their€productsÏin€the€global€marketplace.Ìñ’ñœñ’ñThisñ’ñ›ñ’ññ’ññ’ñ€regulation€also€implements€changes€for€encryption€items€made€by€the€¢Wassenaar£ÏArrangement,€including:€conversion€of€Category€5„€Part€2€(Information€Security)€of€theÏCommerce€Control€List€(CCL)€to€a€positive€list;€creation€of€a€Cryptography€Note€and€removal€ofÏencryption€software€from€the€General€Software€Note;€decontrol€of€64„bit€mass€market€softwareÏand€commodities,€including€components;€and€decontrol€of€certain€512„bit€key€managementÏproducts.ÌÔ#†™XHËXXXHËÒ #ÔÐ È-`'* ÐThe€EAR€is€amended€as€follows:Ìà  à1.€€In€ðð734.2,€Important€EAR€Terms€and€Principles,€unrestricted€encryption€source€codeÏunder€ðð740.13€(e),€commercial€encryption€source€code€under€ðð740.17(a)(5)(¢i£)€and€retail€productsÏunder€ðð740.17£(a)(3)€are€exempted€from€Internet€download€screening€requirements€in€ðð734.2Ï(b)(9)(iii).€€A€revised€screening€mechanism€for€other€encryption€products€exported€to€governmentÏend„users€is€added.€€Please€note€that€ðð734.2(b)(9)€contains€the€relevant€definitions€for€the€exportÏof€encryption€source€code€and€object€code€software.€€In€addition,€cross„referencing€changes€areÏmade€to€ðððð734.7,€734.8,€and€734.9.€Ô‡XHËXX™XHËÔÐ ˆ  Ðà  à2.€In€ðð740.13,€Technology€and€Software€Unrestricted,€changes€are€made€to€Ô#†™XHËXXXHË#ÔreflectÐ h Ðamendments€to€the€Wassenaar€Arrangement.€€Specifically,€Ô‡XHËXX™XHËÔencryption€software€is€no€longerÐ Hà Ðeligible€for€mass€market€treatment€under€the€General€Software€Note.€€Encryption€commoditiesÏand€software€are€now€eligible€for€mass€market€treatment€under€the€new€Cryptography€Note€inÏCategory€5€„€Part€2€of€the€CCL.€€This€Note€multilaterally€decontrols€mass€market€encryptionÏcommodities€and€software€up€to€and€including€64„bits.€€Such€products,€after€review€andÏclassification€by€BXA,€are€classified€under€Export€Commodity€Control€Numbers€(¢ECCNs)£Ï¢5A992£€or€¢5D992£,€thereby€releasing€them€from€¢ð ðEIðð€(Encryption€Items)£€and€ð ðNSðð€(NationalÏSecurity)€controls,€and€making€them€eligible€for€export€and€reexport€to€all€destinations€(seeÏðð742.15(b)(1)(iii)€of€the€EAR).€€Once€mass€market€encryption€software€and€commodities€areÏreleased€from€ð ð¢EI£ðð€controls€they€may€be€eligible€for€de€minimis€and€publicly€available€treatmentÏ(see€part€734€of€the€EAR).€€€Ô#†™XHËXXXHË‚#ÔÐ * #& Ðà  à3.€Ô‡XHËXX™XHËÔAlso€in€ðð740.13,€to,€in€part,€take€into€account€the€ð ðopen€sourceðð€approach€to€softwareÐ è+€%( Ðdevelopment,€unrestricted€encryption€source€code€not€subject€to€an€express€agreement€for€theÐ È-`'* Ðpayment€of€a€licensing€fee€or€royalty€for€commercial€production€or€sale€of€any€product€developedÏusing€the€source€code€Ô#†™XHËXXXHˈ#Ôcan,Ô‡XHËXX™XHËÔ€without€review,€be€released€from€ð ð¢EI£ðð€controls€and€exported€andÐ Hà Тreexported£€under€License€Exception€¢TSU£.€€Intellectual€property€protection€(e.g.,€copyright,Ïpatent,€or€trademark)€would€not,€by€itself,€be€construed€as€an€express€agreement€for€the€paymentÏof€a€licensing€fee€or€royalty€for€commercial€production€or€sale€of€any€product€developed€usingÏthe€source€code.€€To€qualify,€exporters€must€notify€BXA€of€the€Internet€location€(e.g.,€¢URL€orÏInternet€address£)€or€provide€a€copy€of€the€source€code€by€the€time€of€export.€€These€notificationsÏare€only€required€for€the€initial€export;€there€are€no€notification€requirements€for€end„usersÏsubsequently€using€the€source€code.€€Notification€can€be€made€by€e„mail€to€crypt@bxa.doc.gov.Ô#†™XHËXXXHË*#Ô¢£€€€Ð h Ðà  àReview€and€classification€are€not€required€for€foreign€made€products€using€this€sourceÏcode.€€Moreover,€under€ðð744.9,€exporters€of€unrestricted€encryption€source€code€are€notÏrestrained€from€providing€technical€assistance€to€foreign€persons€working€with€such€source€code.€ÏIn€addition,€exporters€of€source€code€are€not€subject€to€Internet€download€screening€requirementsÏunder€ðð734.2(b)(9)(iii).€€Posting€of€the€source€code€on€the€Internet€(e.g.,€FTP€or€World€WideÏWeb€site),€where€it€may€be€downloaded€by€anyone,€would€not€establish€"knowledge"€(as€thatÏterm€is€defined€in€the€EAR)€of€a€prohibited€export€or€reexport.€€Such€posting€would€not€triggerÏ"red€flags"€necessitating€the€affirmative€duty€to€inquire€under€the€"Know€Your€Customer"Ïguidance€provided€in€Supplement€No.€3€to€Part€732.€€Otherwise,€compliance€with€EARÏrequirements€as€to€prohibited€exports€and€reexports€still€apply.Ìà  à4.€€In€ðð740.17,€Encryption€Commodities€and€Software,€language€is€added€to€implementÏthe€Administrationððs€new€policy.€€License€Exception€ENC€(Encryption€Commodities€andÏSoftware)€is€revised€as€follows:Ð È-`'* Їà  àà ` àa.€€Encryption€items€under€¢ECCNs£€¢5A002£,€¢5D002£€or€¢5E002£€can€be€exported€andÏ¢reexported£€to€foreign€subsidiaries€of€U.S.€companies,€including€the€transfer€of€encryptionÏtechnology€to€their€foreign€employees€in€the€U.S.,€without€technical€review€and€classification.€ÏAny€items€developed€by€the€U.S.€company€for€sale€or€retransfer€outside€the€U.S.€company€areÏsubject€to€review€and€classification€by€BXA.€€Foreign€companies€with€subsidiaries€in€the€U.S.Ïcan€apply€for€Encryption€Licensing€Arrangements€(ELAs)€to€obtain€treatment€equivalent€to€thatÏextended€to€foreign€subsidiaries€of€U.S.€parent€companies.Ì€à  àà ` àb.€€A€new€paragraph,€entitled€ð ðEncryption€commodities€and€software,ðð€is€createdÐ ˆ  Ðto€implement€the€broad€authorization€for€encryption€exports€contained€in€the€September€16Ïannouncement.€€Under€this€paragraph,€any€encryption€commodity,€software€or€components€ofÏany€key€length€classified€under€¢ECCNs£€¢5A002£€and€¢5D002£Ô‡™LgüLX™XHËÔ€can€be€Ô#†™XHËXL™Lgüê%#Ôexported€and€¢reexported£€toÐ (À Ðindividuals,€commercial€firms€and€other€non„government€end„users.€€Previous€sector„specificÏliberalizations€for€banks€and€financial€institutions,€health€and€medical€end„users€and€on„lineÏmerchants€are€subsumed€into€this€new€paragraph.€€Previous€restrictions€limiting€exports€toÏforeign€commercial€firms€for€internal€company€proprietary€use€are€removed.€€In€addition,€foreignÏproducts€developed€from€encryption€components,€while€subject€to€the€EAR,€do€not€requireÏreview€and€classification€prior€to€¢reexport£.€€Exports€and€¢reexports£€to€government€end„usersÏrequire€a€license.Ìà  àà ` àc.€A€new€paragraph€entitled€ð ðRetail€encryption€commodities€and€softwareðð€isÏcreated.€€Retail€encryption€commodities€and€software€under€¢ECCNs£€¢5A002£€and€¢5D002£€are€thoseÏwhich€are€widely€available€and€can€be€exported€and€¢reexported£€to€any€end„user€(including€anyÏInternet€and€telecommunications€service€provider),€to€provide€products€and€services€(e.g.,€e„Ð È-`'* Ðcommerce,€client„server€applications,€or€software€subscriptions)€to€any€end„user.€The€criteria€toÏdetermine€eligibility€as€a€retail€product€include€functionality,€sales€volume,€distribution€methods,Ïability€to€modify€products€and€requirements€for€substantial€support€by€the€supplier.€€SubstantialÏsupport€for€retail€encryption€commodities€and€software€would€mean€a€service€contract€or€otherÏsignificant€vendor€support€beyond€what€is€minimally€necessary€for€the€productððs€operation.€€HelpÏdesk€calls€are€not€considered€substantial€support.€€Refer€to€ðð740.17(a)(3)€of€the€EAR€for€aÏdetailed€definition€of€retail€encryption€commodities€and€software€(which€may€includeÏcomponents€as€well€as€encryption€source€code)€and€an€illustrative,€yet€non„restrictive,€list€of€suchÏproducts.€€Finance„specific,€56„bit€ñ’ñœñ’ñnon„mass€market€productsñ’ñ›ñ’ññ’ññ’ñ€with€a€key€exchange€greater€thanÏ512€bits€and€up€to€1024€bits,€network„based€applications€and€other€products€which€areÏfunctionally€equivalent€to€retail€products€are€considered€retail€products.€€€Ìñ’ñœñ’ñEncryptionñ’ñ›ñ’ññ’ññ’ñ€software€patches€for€retail€products€remain€eligible€under€License€Exception€TSUÏand€certain€upgrades€for€retail€products,€where€the€cryptographic€functionality€has€not€changed,Ïare€authorized€under€License€Exception€ENC.€€Also,€foreign€products€developed€from€retailÏencryption€components,€while€subject€to€the€EAR,€require€no€technical€review€or€licenseÏauthorization€prior€to€¢reexport£;€however,€post„export€reporting€requirements€exist.€€RetailÏencryption€products€are€not€subject€to€Internet€download€screening€requirements€listed€inÏðð734.2(b)(9)(iii);€however,€all€other€general€ñ’ñœñ’ñprohibitions,€such€as€those€forñ’ñ›ñ’ññ’ññ’ñ€the€seven€terrorist„¼supporting€countries,€apply.Ìà  àà ` àñ’ñœñ’ñd.Ô‡XHËXX™XHËÔ€€A€new€paragraph€is€added€to€License€Exception€¢ENC£€entitledÐ * #& Ðð ðTelecommunications€and€Internet€service€providers.ðð€€Telecommunications€and€Internet€serviceÏproviders€can€obtain€and€use€any€encryption€product€under€this€license€exception€to€provideÐ È-`'* Ðencryption€services,€including€public€key€infrastructure€services€for€the€general€public;€however,Ïprovision€of€services€specific€to€governments€(e.g.,€running€a€virtual€private€network€for€aÏgovernment€agency),€will€require€a€license.Ô#†™XHËXXXHËx1#Ôñ’ñ›ñ’ññ’ññ’ñÐ ( À Ðà  àà ` àe.€€A€paragraph€entitled€ð ðCommercial€encryption€source€code€and€general€purposeÏencryption€toolkitsðð€is€added.€€You€may€export€and€reexport€general€purpose€encryption€toolkitsÏand€encryption€source€code,€not€released€under€ðð740.13,€classified€under€ECCN€5D002,€subjectÏto€the€following€provisions:Ìà  àà ` àà ¸ à(1)€Commercial€encryption€source€code€which€would€be€consideredÏpublicly€available€under€ðð734.3€and€which€is€subject€to€an€express€agreement€for€the€payment€ofÏa€licensing€fee€or€royalty€for€commercial€production€or€sale€of€any€product€developed€using€theÏsource€code,€canÔ‡XHËXX™XHËÔ€be€exported€or€¢reexported£€to€any€end„user.€€This€source€code,€which€includesÐ (À Ðsome€ð ðcommunityðð€source€code,€may€be€exported€or€¢reexported£€without€review€andÏclassification,€provided€you€have€submitted€to€BXA,€by€the€time€of€export,€written€notification€ofÏthe€Internet€location€(e.g.,€¢URL€or€Internet€address£)€or€a€copy€of€the€source€code.€€TheseÏnotifications€are€only€required€for€the€initial€export;€there€are€no€notification€requirementsÔ#†™XHËXXXHËx6#Ô€forÐ ¨ @ Ðend„users€subsequently€utilizing€the€source€code.€€The€notification€can€be€sent€via€e„mail€toÏcrypt@¢bxa.doc.gov.€Ô‡XHËXX™XHËÔÐ h$  Ðà  àà ` àà ¸ à(2)€Encryption€source€code€which€would€not€be€considered€publiclyÏavailable€may€be€exported€or€¢reexported£€to€any€non„government€end„user€after€review€andÏclassification€by€BXA.€Ìà  àà ` àà ¸ à(3)€General€purpose€encryption€toolkits€may€be€exported€and€¢reexported£Ïafter€review€and€classification€by€BXA€to€any€non„government€end„user.€Ð È-`'* Їà  àNote€to€this€paragraph:€Neither€review€and€classification€nor€¢reexport£€licensingÏrequirements€are€required€under€this€section€for€foreign€finished€products€using€U.S.„originÏsource€code,€toolkits€and€components;€yet€the€foreign€finished€products€remain€subject€to€theÏEAR.€€Ô#†™XHËXXXHË9#ÔPost„export€reporting€for€foreign€products€developed€for€commercial€sale€with€sourceÐ    Ðcode€and€general€purpose€encryption€toolkits€exported€under€this€paragraph€is€limited€to€theÏname€and€address€of€the€foreign€manufacturer€and€certain€non„proprietary€technical€informationÏabout€the€foreign€product.€€Ô‡XHËXX™XHËÔExporters€should€always€be€aware€of€the€General€ProhibitionsÐ ¨@  Ðidentified€in€part€736€of€the€EAR€(e.g.,€prohibited€exports€and€¢reexports£€to€Denied€Persons€andÏembargoed€destinations).Ìà  àà ` àf.€€¢Grandfathering£€and€¢Upgrades€in€Key€Length£:€Encryption€commodities€andÏsoftware€previously€approved€under€a€license,€or€eligible€for€License€Exception€¢ENC,€excludingÏitems€previously€approved€only€to€U.S.€subsidiaries,€can€be€exported€and€reexported€to€non„¼government€end„users€without€additional€review€and€classification.€€Previously€classifiedÏfinancial„specific€or€certain€56„bit€products€are€eligible€for€export€and€¢reexport£€to€any€¢end„usersÏwithout€an€additional€classification£.€€All€previously€classified€products€can€be€upgraded€providedÏthe€only€change€is€in€the€key€length€used€for€confidentiality€and€key€exchange.€€Exporters€must,Ïprior€to€export€of€an€upgraded€product,€certify€in€a€letter€from€a€corporate€official€the€onlyÏchange€is€the€key€length€for€confidentiality€or€key€exchange€algorithms€and€there€is€no€otherÏchange€in€cryptographic€functionality.€€Ìà  àà ` àg.€€Exporters€may€export€any€product€to€any€non„government€end„user€30€daysÏafter€receipt€by€BXA€of€a€complete€classification€request,€unless€otherwise€notified€by€BXA.€€NoÏexports€to€government€end„users€are€allowed€under€this€provision€and€BXA€reserves€the€right€toÐ È-`'* Ðsuspend€eligibility€in€those€instances€where€requested€additional€information€has€not€beenÏprovided€or€when€the€classification€review€is€not€proceeding€in€an€appropriate€fashion.Ìà  àà ` àh.€€Reporting€requirements€under€License€Exception€¢ENC£€are€eliminated€for€manyÏencryption€items.€€Remaining€reporting€requirements€are€streamlined€to€reflect€business€modelsÏnormally€used€by€exporters.€€Note€that€reporting€requirements€for€exports€and€¢reexports£€ofÏencryption€components€can€be€adjusted€or€reduced,€on€a€case„by„case€basis,€provided€an€exporterÏsupplies€BXA€with€sufficient€information€during€the€initial€technical€review€of€the€U.S.Ïencryption€component€concerning€its€incorporation€into€a€final€foreign€product.€€ExamplesÏinclude€those€components€restricted€by€their€design€for€use€in€certain€types€of€products.€€BXAÏwill€notify€exporters€of€such€treatment€in€its€classification€determination.€€All€requiredÏnotifications,€upgrade€certifications€and€reports€should€be€sent€electronically€or€mailed€to€theÏaddresses€cited€in€this€regulation.Ìà  àNote€to€this€paragraph:€Post„export€reporting€is€required€for€certain€exports€to€foreignÏbanks€and€financial€institutions.€Ìà  à5.€€In€part€740,€Supplement€No.€3€is€removed.€€Supplement€No.€3€previously€listedÏcountries€eligible€to€receive€certain€encryption€products;€such€products€are€now€eligible€forÏexport€and€reexport€to€all€destinations.€Ìà  à6.€€In€ðð742.15,€the€licensing€policy€section€for€exports€and€¢reexports£€of€encryption€itemsÏis€changed€as€follows:€Ìà  àà ` à€a.€€Review€and€classification€are€required€by€BXA€before€certain€encryptionÏitems€can€be€released€from€ð ð¢EI£ðð€and€ð ðNSðð€controls€under€¢ECCNs£€¢5A992£,€¢5D992£€and€¢5E992£.€ÏThese€items€include:€64„bit€mass€market€encryption€commodities€and€software;€certainÐ È-`'* Ðencryption€items€up€to€and€including€56„bits;€and€asymmetric€key€exchange€algorithms€notÏexceeding€512€bits€or€an€elliptic€curve€at€112€bits.€€Encryption€items€under€these€¢ECCNs£€do€notÏrequire€a€license€or€license€exception€and€may€be€exported€and€¢reexported£€as€ð ð¢NLR£ðð€(No€LicenseÏRequired).€€Ìà  àà ` à€b.€€Upgrades:€40€and€56„bit€DES€or€equivalent€mass€market€commodities€andÏsoftware€previously€classified€as€eligible€for€License€Exception€¢ENC£€or€¢TSU£€may€be€upgraded€toÏ64„bits€for€the€confidentiality€algorithm.€€Exporters€must,€prior€to€export€of€an€upgraded€product,Ïcertify€to€BXA€in€a€letter€from€a€corporate€official€that€the€only€change€is€the€key€length€forÏconfidentiality€or€key€exchange€algorithms€and€there€is€no€other€change€in€cryptographicÏfunctionality.€€Note€that€other€mass€market€encryption€commodities€and€software€previouslyÏexported€under€License€Exception€¢ENC£€or€¢TSU£€are€now€classified€as€either€¢5A992£€or€¢5D992£€andÏeligible€for€ð ð¢NLR£ðð€treatment.€€Encryption€items€under€¢5A992£,€¢5D992£€and€¢5E992£€are€not€subjectÏto€Internet€download€screening€requirements€listed€in€ñ’ñœñ’ñÔ#†™XHËXXXHËx=#ÔððÔ‡XHËXX™XHËÔ734.2(b)(9)(iii).ñ’ñ›ñ’ññ’ññ’ñ€€Ð è€ Ðà  àà ` àc.€€The€licensing€policies€for€exports€and€¢reexports£€of€encryption€items€for€banksÏand€financial€institutions,€health€and€medical€end„users,€and€on„line€merchants,€as€well€as€U.S.Ïsubsidiaries,€are€subsumed€into€a€new€licensing€policy€paragraph€for€all€encryption€items€underÏ¢ECCNs£€¢5A002£,€¢5D002£€or€¢5E002€eligible€for€License€Exception€ENC.€€For€U.S.€subsidiaries,€aÔ#†™XHËXXXHË&O#ÔnyÐ h$  Ðencryption€item€(including€technology€classified€under€¢5E002£€to€foreign€employees€located€inÏthe€U.S.)€is€permitted€for€export€or€¢reexport£€under€License€Exception€¢ENC£€without€review€andÏclassification.€€Also,€aÔ‡XHËXX™XHËÔny€encryption€item,€including€components,€under€¢ECCNs£€¢5A002£€or€¢5D002£Ð * #& Ðcan€be€exported€and€¢reexported£€to€non„government€end„users€in€all€destinations.€€Retail€productsÏunder€¢5A002£€or€¢5D002£€can€be€exported€and€¢reexported£€to€all€end„users.€€Ô#†™XHËXXXHË"R#ÔÐ È-`'* Їà  àà ` àd.€€Licenses€required€for€exports€and€reexports€of€encryption€items€toÏgovernments,€or€Internet€and€telecommunications€service€providers€for€the€provision€of€servicesÏspecific€to€governments,€may€be€considered€favorably€for€civil€uses.Ìò òòòà  àà ` àóóó óe.€Ô‡XHËXX™XHËÔUnder€Encryption€Licensing€Arrangements€(¢ELAs£),€distributors€and€resellersÐ    Ðcan€export€and€¢reexport£€under€¢ELAs£€as€long€as€they€comply€with€restrictions€contained€in€theÏ¢ELA£.€€Ìà  à7.€€In€ðð770.2,€Commodity€interpretations,€a€new€interpretation€for€ð ðEncryptionÏcommodity€and€software€reviewsðð€is€added.€€This€interpretation€Ô#†™XHËXXXHË´T#Ôclarifies€which€encryption€itemsÐ ˆ  Ðrequire€a€review€and€what€a€review€entails.Ìà  à8.€€In€part€772,€Definition€of€terms,€definitions€for€the€following€terms€are€added:ÏAsymmetric€Algorithm,€Encryption€Component,€Government€End„User,€Open€CryptographicÏInterface€and€Symmetric€Algorithm.€€€Ìà  à9.€€In€part€774,€the€Commerce€Control€List,€¢ECCNs£€¢5A002£€and€¢5D002£€are€revised€toÏreflect€changes€in€the€¢Wassenaar£€Arrangement,€and€the€Cryptography€Note€is€added€as€Note€3€toÏCategory€5€„€Part€2.€Ìñ’ñœñ’ñInñ’ñ›ñ’ñ€addition€to€these€changes,€BXA€is€making€the€following€clarifications€and€interpretations€forÏall€encryption€items€subject€to€the€EAR.Ìà  à1.€€The€review€and€classification€process€is€used€to€classify€encryption€items€for€theirÏproper€licensing€mechanism€and€not€to€delay€or€deny€a€proposed€transaction.€€Once€aÏclassification€request€is€received,€the€itemððs€specifications€are€reviewed€and€processed€inÏaccordance€with€ðð748.3€of€the€EAR€to€determine€its€classification.€€Once€completed,€exportersÏwill€receive€a€document€by€mail€informing€them€of€the€productððs€technical€classification€andÐ È-`'* Ðproper€licensing€mechanism.€€The€EAR€also€provides€an€appeal€process€for€exporters€unsatisfiedÏwith€BXAððs€product€classification€(see€ðð756.2€of€the€EAR).Ìà  à2.€€It€is€BXAððs€intent€to€allow€end„users€of€encryption€items€to€provide€their€customersÏwith€encryption€products€and€services.€€However,€exports€to€Internet€and€telecommunicationsÏservice€providers€are€subject€to€restrictions€when€providing€services€specific€to€government€end„¼users.€Ìà  à3.€€It€was€not€the€intent€of€the€new€¢Wassenaar£€language€for€¢ECCN£€¢5A002£€to€be€moreÏrestrictive€concerning€Message€Authentication€Codes€(MAC).€€ð ðData€authentication€equipmentÏthat€calculates€a€Message€Authentication€Code€(MAC)€or€similar€result€to€ensure€no€alteration€ofÏtext€has€taken€place,€or€to€authenticate€users,€but€does€not€allow€for€encryption€of€data,€text€orÏother€media€other€than€that€needed€for€the€authenticationðð€continues€to€be€excluded€from€controlÏunder€¢5A002£.€€These€commodities€are€controlled€under€¢ECCN£€¢5A992£.Ìà  à4.€ñ’ñœñ’ññ’ñ›ñ’ññ’ññ’ññ’ñœñ’ñ€Noteñ’ñ›ñ’ññ’ññ’ñ€that€ðð740.8,€Key€Management€Infrastructure€(KMI),€authorizes€the€export€andÏreexport€of€certain€encryption€software€and€commodities€under€License€Exception€KMI€and€willÏcontinue€as€an€eligible€licensing€mechanism€for€encryption€products.Ìà  àñ’ñœñ’ñ5.ñ’ñ›ñ’ññ’ññ’ñ€A€number€of€companies€have€expressed€concern€that€the€European€Union€(EU)€mayÏimplement€a€general€authorization€permitting€encryption€items€to€be€exported€freely€within€theÏEU€and€other€specified€countries.€€If€and€when€the€EU€implements€such€an€authorization,€theÏAdministration€will€take€the€necessary€steps€to€ensure€U.S.€exporters€are€not€disadvantaged.Ô‡XHËXX™XHËÔÐ ((À!$ Ðñ’ñœñ’ññ’ñ›ñ’ññ’ññ’ñà  àñ’ñœñ’ñ6.ñ’ñ›ñ’ññ’ññ’ñ€€Note€that€Serbia€and€the€¢Taliban£€controlled€areas€of€Afghanistan€are€embargoedÏdestinations.€€€Ô#†™XHËXXXHËßa#ÔÐ è+€%( Ðà  àñ’ñœñ’ñ7.ñ’ñ›ñ’ññ’ññ’ñ€€Please€refer€to€the€BXA€website€at€ð ðwww.bxa.doc.govðð€for€a€detailed€explanation€ofÐ È-`'* Ðthe€EAR,€the€Commerce€Control€List,€the€licensing€process€and€key€terms€used€in€this€regulation.€ñ’ñœñ’ñÌÌAlthoughñ’ñ›ñ’ññ’ññ’ñ€the€Export€Administration€Act€(EAA)€expired€on€August€20,€1994,€the€PresidentÏinvoked€the€International€Emergency€Economic€Powers€Act€and€continued€in€effect€the€EAR,Ïand,€to€the€extent€permitted€by€law,€the€provisions€of€the€EAA€in€Executive€Order€12924€ofÏAugust€19,€1994,€as€extended€by€the€President's€notices€of€August€15,€1995€(60€FR€42767),ÏAugust€14,€1996€(61€FR€42527),€August€13,€1997€(62€FR€43629),€August€13,€1998€(63€FRÏ44121),€and€August€10,€1999€(64€F.R.€44101).Ìñ’ñœñ’ñRulemakingñ’ñ›ñ’ñ€RequirementsÌà  à1.€€This€interim€final€rule€has€been€determined€to€be€significant€for€purposes€of€E.O.Ï12866.Ìà  à2.€Ô‡XHËXX™XHËÔ€Ô#†™XHËXXXH˪f#ÔNotwithstanding€any€other€provision€of€law,€no€person€is€required€to€respond€to,€norÐ   Ðshall€any€person€be€subject€to€a€penalty€for€failure€to€comply€with€a€collection€of€information,Ïsubject€to€the€requirements€of€the€Paperwork€Reduction€Act€(PRA),€unless€that€collection€ofÏinformation€displays€a€currently€valid€OMB€Control€Number.€€This€rule€involves€collections€ofÏinformation€subject€to€the€Paperwork€Reduction€Act€of€1995€(44€U.S.C.€3501€òòet€seqóó.).€€TheseÐ ˆ"  Ðcollections€have€been€approved€by€the€Office€of€Management€and€Budget€under€control€numbersÏ0694„0088,€Ô‡XHËXX™XHËÔð ðMulti„Purpose€Applicationðð€Ô#†™XHËXXXHËNi#ÔÔ‡XHËXX™XHËÔand€0694„0104,€ð ðÔ#†™XHËXXXH˲i#ÔCommercial€Encryption€ItemsÐ H&à" ÐTransferred€from€the€Department€of€State€to€the€Department€of€Commerce.ðð€€The€DepartmentÏhas€submitted€to€OMB€an€emergency€request€for€approval€of€the€changes€to€the€collection€ofÏinformation€under€OMB€control€number€0694„0104.€€Ìà  àThis€interim€final€rule€reduces€the€annual€burden€hours€associated€with€collection€0694„Ð È-`'* Ð0104€from€ñ’ñœñ’ñ703ñ’ñ›ñ’ññ’ññ’ñ€hours€to€692€hours,€and€reduces€collection€0694„0088€by€200€burden€hours.€€ForÏcollection€0694„0104,€it€is€estimated€it€will€take€companies€5€minutes€to€complete€notificationsÏfor€source€code€under€License€Exceptions€TSU€and€ENC.€€It€will€take€companies€15€minutes€toÏcomplete€upgrade€notifications.€€For€reporting€under€License€Exception€ENC€and€licenses€forÏencryption€items,€it€will€take€companies€4€hours€to€complete€semi„annual€reporting€requirements.€Ïà  àComments€on€collection€0694„0104€are€welcome,€and€will€be€accepted€until€ñ’ñœñ’ñApril€13,Ï2000.ñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñ€Commentsñ’ñ›ñ’ññ’ññ’ñ€are€invited€on:€(a)€whether€the€collection€of€information€is€necessary€for€theÏproper€performance€of€the€functions€of€the€agency,€including€whether€the€information€shall€haveÏpractical€utility;€(b)€the€accuracy€of€the€agency's€estimate€of€the€burden€of€the€proposedÏcollection€of€information;€(c)€ways€to€enhance€the€quality,€utility,€and€clarity€of€the€informationÏto€be€collected;€and€(d)€ways€to€minimize€the€burden€of€the€collection€of€information€onÏrespondents,€including€through€the€use€of€automated€collection€techniques€or€other€forms€ofÏinformation€technology.€€Comments€regarding€these€burden€estimates€or€any€other€aspect€of€theÏcollection€of€information,€including€suggestions€for€reducing€the€burdens,€should€be€Ìforward€to€Frank€J.€Ruggiero,€Regulatory€Policy€Division,€Office€of€Exporter€Services,€BureauÏof€Export€Administration,€Department€of€Commerce,€P.O.€Box€273,€Washington,€D.C.€20044,Ïand€David€Rostker,€Office€of€Management€and€Budget,€OMB/OIRA,€725€17th€Street,€NW,ÌNEOB€Rm.€10202,€Washington,€D.C.€20503.Ìà  à3.€€This€rule€does€not€contain€policies€with€Federalism€implications€sufficient€to€warrantÏpreparation€of€a€Federalism€assessment€under€Executive€Order€13132.ÌÌà  à4.€€The€provisions€of€the€Administrative€Procedure€Act€(5€U.S.C.€553)€requiring€notice€ofÐ È-`'* Ðproposed€Rulemaking,€the€opportunity€for€public€participation,€and€a€delay€in€effective€date,€areÏinapplicable€because€this€regulation€involves€a€military€and€foreign€affairs€function€of€the€UnitedÏStates€(Sec.€5€U.S.C.€553(a)(1)).€€Further,€no€other€law€requires€that€a€notice€of€proposedÏrulemaking€and€an€opportunity€for€public€comment€be€given€for€this€interim€final€rule.€€BecauseÏa€notice€of€proposed€rulemaking€and€an€opportunity€for€public€comment€are€not€required€to€beÏgiven€for€this€rule€under€5€U.S.C.€or€by€any€other€law,€the€analytical€requirements€of€theÏRegulatory€Flexibility€Act€(5€U.S.C.€601€òòet€seq.óó€)€are€not€applicable.Ð ¨@  ÐÔ‡XHËXX™XHËÔà  àHowever,€because€of€the€importance€of€the€issues€raised€by€this€regulation,€it€is€issued€inÐ ˆ  Ðinterim€final€form€and€comments€will€be€considered€in€the€development€of€final€regulations.€ÏAccordingly,€the€Department€of€Commerce€encourages€interested€persons€who€wish€to€commentÏto€do€so€at€the€earliest€possible€time€to€permit€the€fullest€consideration€of€their€views.€Ìà  àThe€period€for€submission€of€comments€will€close€ñ’ñœñ’ñMay€12,€2000.ñ’ñ›ñ’ññ’ññ’ñ€€The€Department€willÏconsider€all€comments€received€before€the€close€of€the€comment€period€in€developing€finalÏregulations.€€Comments€received€after€the€end€of€the€comment€period€will€be€considered€ifÏpossible,€but€their€consideration€cannot€be€assured.€€The€Department€will€not€accept€publicÏcomments€accompanied€by€a€request€that€a€part€or€all€of€the€material€be€treated€confidentiallyÏbecause€of€its€business€proprietary€nature€or€for€any€other€reason.€€The€Department€will€returnÏsuch€comments€and€materials€to€the€persons€submitting€the€comments€and€will€not€consider€themÏin€the€development€of€final€regulations.€€All€public€comments€on€these€regulations€will€be€aÏmatter€of€public€record€and€will€be€available€for€public€inspection€and€copying.€€In€the€interest€ofÏaccuracy€and€completeness,€the€Department€requires€comments€in€written€form.€€CommentsÏshould€be€provided€with€5€copies.Ð È-`'* Ðñ’ñœñ’ñà  àOralñ’ñ›ñ’ññ’ññ’ñ€comments€must€be€followed€by€written€memoranda,€which€will€also€be€a€matter€ofÏpublic€record€and€will€be€available€for€public€review€and€copying.Ô#†™XHËXXXHË v#ÔÐ Hà Ðñ’ñœñ’ñà  àTheñ’ñ›ñ’ññ’ññ’ñ€public€record€concerning€these€regulations€will€be€maintained€in€the€Bureau€ofÏExport€Administration€Freedom€of€Information€Records€Inspection€Facility,€Room€6881,ÏDepartment€of€Commerce,€14th€Street€and€Pennsylvania€Avenue,€Ô_ÔN.W.Ô_Ô,€Washington,€DC€Ï20230.€€Records€in€this€facility,€including€written€public€comments€and€memoranda€summarizingÏthe€substance€of€oral€communications,€may€be€inspected€and€copied€in€accordance€withÏregulations€published€in€Part€4€of€Title€15€of€the€Code€of€Federal€Regulations.€€Information€aboutÏthe€inspection€and€copying€of€records€at€the€facility€may€be€obtained€from€the€Bureau€of€ExportÏAdministration€Freedom€of€Information€Officer,€at€the€above€address€or€by€calling€(202)Ï482-0500.€Ô_ÔÔ_ÔÌñ’ñœñ’ñListñ’ñ›ñ’ññ’ññ’ñ€of€SubjectsÌñ’ñœñ’ñ15ñ’ñ›ñ’ññ’ññ’ñ€CFR€part€734Ìà  àAdministrative€practice€and€procedure,€Exports,€Foreign€trade.Ìñ’ñœñ’ñ15ñ’ñ›ñ’ññ’ññ’ñ€CFR€part€740€Ìà  àAdministrative€practice€and€procedure,€Exports,€Foreign€trade,€Reporting€and€record€Ìkeeping€requirements.Ìñ’ñœñ’ñ15ñ’ñ›ñ’ññ’ññ’ñ€CFR€parts€742,€770,€772,€and€774Ìà  àExports,€Foreign€Trade.Ìà  àAccordingly,€parts€734,€740,€742,€770,€772,€and€774€of€the€Export€AdministrationÏRegulations€(15€CFR€parts€730€through€799)€are€amended€as€follows:ÌÐ È-`'* ÐÝ‚éÿÝÝ  ÝÝ‚é^‚Ýà  àÚƒÚ1Ú  Ú.Û€ÛÝ  Ý€€The€authority€citation€for€part€734€continues€to€read€as€follows:€Ýƒé^‚y‚ÝŒÌŒÝ  Ýà  àòòAuthority:óó€50€U.S.C.€app.€2401€òòet€seqóó.;€50€U.S.C.€1701€òòet€seqóó.;€€E.O.€12924,€59€FRÐ Hà Ð43437,€3€Ô_ÔCFRÔ_Ô,€1994€Comp.,€p.€917;€E.O.€12938,€59€FR€59099,€3€Ô_ÔCFRÔ_Ô,€1994€Comp.,€p.€950;€E.O.Ï13020,€61€FR€54079,€3€Ô_ÔCFRÔ_Ô,€1996€Comp.€p.€219;€E.O.€13026,€61€FR€58767,€3€Ô_ÔCFRÔ_Ô,€1996ÏComp.,€p.€228;€Notice€of€November€12,€1998,€63€FR€63589,Ô‡™ôÙeôX™XHËÔ€ÓB.°°` ¸ hÀpÈ xÐ (#°œXBÓÔ#†™XHËXô™ôÙe*…#Ô3€Ô_ÔCFRÔ_Ô,€1998€Comp.,€p.€305;€NoticeÐ è € Ðof€August€10,€1999,€64€FR€44101€(August€13,€1999).Ìà  à2.€€The€authority€citation€for€part€740€continues€to€read€as€follows:Ìà  àòòAuthority:óó€50€U.S.C.€app.€2401€òòet€seqóó.;€50€U.S.C.€1701€òòet€seqóó.;€E.O.€12924,€59€FR€43437,Ð ˆ  Ð3€Ô_ÔCFRÔ_Ô,€1994€Comp.,€p.€917;€E.O.€13026,€61€FR€58767,€3€Ô_ÔCFRÔ_Ô,€1996€Comp.,€p.€228;€Ô‡XHËXX™XHËÔNotice€ofÐ h ÐAugust€10,€1999,€64€FR€44101€(August€13,€1999).Ô#†™XHËXXXHˤ‡#ÔÐ Hà Ðà  à3.€€The€authority€citation€for€part€742€continues€to€read€as€follows:Ìà  àAuthority:€50€U.S.C.€app.€2401€òòet€seqóó.;€50€U.S.C.€1701€òòet€seqóó.;€18€U.S.C.€2510€òòet€seqóó.;€22Ð   ÐU.S.C.€3201€òòet€seqóó.;€42€U.S.C.€2139a;€E.O.€12058,€43€FR€20947,€3€Ô_ÔCFRÔ_Ô,€1978€Comp.,€p.€179;Ð è€ ÐE.O.€12851,€58€FR€33181,€3€Ô_ÔCFRÔ_Ô,€1993€Comp.,€p.€608;€E.O.€12924,€59€FR€43437,€3€Ô_ÔCFRÔ_Ô,€1994ÏComp.,€p.€917;€E.O.€12938,€59€FR€59099,€3€Ô_ÔCFRÔ_Ô,€1994€Comp.,€p.€950;€E.O.€13026,€61€FRÏ58767,€3€Ô_ÔCFRÔ_Ô,€1996€Comp.,€p.€228;€Notice€of€November€12,€1998,€63€FR€63589,Ô‡™ôÙeôX™XHËÔÔ‡ô}ôô™ôÙeÔ€ÓB.°°` ¸ hÀpÈ xÐ (#°°XBÓÔ#†X"tXôô}4‹#ÔÔ#†™XHËXXX"tS‹#Ô3€Ô_ÔCFRÔ_Ô,€1998Ð ˆ"  ÐComp.,€p.€305;€Ô‡XHËXX™XHËÔNotice€of€August€10,€1999,€64€FR€44101€(August€13,€1999).Ô#†™XHËXXXHËJŒ#ÔÐ h$  Ðà  à4.€€The€authority€citation€for€part€770€continues€to€read€as€follows:Ìà  àAuthority:€50€U.S.C.€app.€2401€òòetóó€òòseq.óó;€50€U.S.C.€1701€òòetóó€òòseqóó.;€E.O.€12924,€59€FR€43437,Ð ((À!$ Ð3€Ô_ÔCFRÔ_Ô,€1994€Comp.,€p.€917;€E.O.€13026,€61€FR€58767,€3€Ô_ÔCFRÔ_Ô,€1996€Comp.,€p.€228;€Ô‡XHËXX™XHËÔNotice€ofÐ * #& ÐAugust€10,€1999,€64€FR€44101€(August€13,€1999).ÌÔ#†™XHËXXXHËLŽ#Ôà  à5.€€The€authority€citation€for€part€772€continues€to€read€as€follows:Ð È-`'* Їà  àAuthority:€50€U.S.C.€app.€2401€òòet€seqóó.;€50€U.S.C.€1701€òòet€seqóó.;€E.O.€12924,€59€FR€43437,Ð h Ð3€Ô_ÔCFRÔ_Ô,€1994€Comp.,€p.€917;€E.O.€13026,€61€FR€58767,€3€Ô_ÔCFRÔ_Ô,€1996€Comp.,€p.€228;€Ô‡XHËXX™XHËÔNotice€ofÐ Hà ÐAugust€10,€1999,€64€FR€44101€(August€13,€1999).Ô#†™XHËXXXHËW#ÔÐ ( À Ðà  à6.€€The€authority€citation€for€part€774€continues€to€read€as€follows:Ìà  àAuthority:€Ô‡XHËXX™XHËÔ50€U.S.C.€app.€2401€òòet€seqóó.;€50€U.S.C.€1701€òòet€seqóó.;€10€U.S.C.€7420;€10Ð è € ÐU.S.C.€7430(e);€18€U.S.C.€2510€et€seq.;€22€U.S.C.€287c,€22€U.S.C.€3201€et€seq.,€22€U.S.C.€6004;Ï30€U.S.C.€185(s),€185(u);€42€U.S.C.€2139a;€42€U.S.C.€6212;€43€U.S.C.€1354;€46€U.S.C.€app.Ï466c;€50€U.S.C.€app.€5;€E.O.€12924,€59€FR€43437,€3€Ô_ÔCFRÔ_Ô,€1994€Comp.,€p.€917;€E.O.€13026,€61ÏFR€58767,€3€Ô_ÔCFRÔ_Ô,€1996€Comp.,€p.€228;€Notice€of€August€10,€1999,€64€FR€44101€(August€13,Ï1999).Ô#†™XHËXXXHËd‘#ÔÐ Hà Ðñ’ñœñ’ñò òPARTñ’ñ›ñ’ññ’ññ’ñ€734€„€[AMENDED]Ð (À Ðó óà  à7.€Section€734.2€is€amended€by€revising€paragraph€ñ’ñœñ’ñ(b)(9)ñ’ñ›ñ’ññ’ññ’ññ’ñœñ’ñ(ii)ñ’ñ›ñ’ññ’ññ’ñ€and€adding€new€paragraphÐ   Ð(b)(9)(iii)€to€read€as€follows:Ìñ’ñœñ’ñðð734.2ñ’ñ›ñ’ññ’ññ’ñ€Important€EAR€terms€and€principlesÌÓ  Ó*€€€€€*€€€€€*€€€€€*€€€€€*¹ÓH•Óà  à(b)€*€€€€€*€€€€€*€€€€€Ìà  àà ` à(9)€*€€€€€*€€€€€*Ìà  àà ` àà ¸ àñ’ñœñ’ñÔ‡XHËXX™XHËÔ(i)€Ô#†™XHËXXXHËú•#Ô*€€€€€*€€€€€*Ô‡XHËXX™XHËÔÐ H&à" Ðà  àà ` àà ¸ à(ii)ñ’ñ›ñ’ñ€The€export€of€encryption€source€code€and€object€code€softwareÏcontrolled€for€ð ðEIðð€reasons€under€ECCN€5D002€on€the€Commerce€Control€List€(see€SupplementÏNo.€1€to€part€774€of€the€EAR),€except€for€source€code€eligible€for€export€under€Ô#†™XHËXXXHËM–#Ôðððð740.13(e)€andÐ è+€%( Ð740.17(a)(5)(i),€includes€downloading,€or€causing€the€downloading€of,€such€software€to€locationsÐ È-`'* Ð(including€electronic€bulletin€boards,€Internet€file€transfer€protocol,€and€World€Wide€Web€sites)Ïoutside€the€U.S.,€or€making€such€software€available€for€transfer€outside€the€United€States,€overÏwire,€cable,€radio,€electromagnetic,€photo€optical,€photoelectric€or€other€comparableÏcommunications€facilities€accessible€to€persons€outside€the€United€States,€including€transfersÏfrom€electronic€bulletin€boards,€Internet€file€transfer€protocol€and€World€Wide€Web€sites,€unlessÏthe€person€making€the€software€available€takes€precautions€adequate€to€prevent€unauthorizedÏtransfer€of€such€code.Ìà  àà ` àà ¸ à(iii)€ñ’ñœñ’ñSubjectñ’ñ›ñ’ññ’ññ’ñ€to€the€General€Prohibitions€described€in€part€736€of€the€EAR,Ïsuch€precautions€for€Internet€transfers€of€products€eligible€for€export€under€ðððð740.17€(a)(2)Ï(encryption€software€products),€(a)(5)(ii)€(certain€encryption€source€code)€and€(a)(5)(iii)Ï(encryption€ñ’ñœñ’ñtoolkits)ñ’ñ›ñ’ññ’ññ’ñ€shall€include€such€measures€ñ’ñœñ’ñas:ñ’ñ›ñ’ññ’ññ’ñÌà  àà ` àà ¸ àà  à(A)€The€access€control€system,€either€through€automated€means€orÏhuman€intervention,€checks€the€address€of€every€system€outside€of€the€U.S.€or€Canada€requestingÏor€receiving€a€transfer€and€verifies€such€systems€do€not€have€a€domain€name€or€Internet€addressÏof€a€foreign€government€end„user€(e.g.€ð ð.gov,ðð€ð ð.gouv,ðð€€ð ð.milðð€or€similar€addresses);Ìà  àà ` àà ¸ àà  à(B)€The€access€control€system€provides€every€requesting€orÏreceiving€party€with€notice€that€the€transfer€includes€or€would€include€cryptographic€softwareÏsubject€to€export€controls€under€the€Export€Administration€Regulations,€and€anyone€receivingÏsuch€a€transfer€cannot€export€the€software€without€a€license€or€other€authorization;€andÌà  àà ` àà ¸ àà  à(C)€Every€party€requesting€or€receiving€a€transfer€of€such€softwareÏmust€acknowledge€affirmatively€that€the€software€is€not€intended€for€use€by€a€government€end„Ïuser,€as€defined€in€Part€772,€and€he€or€she€understands€the€cryptographic€software€is€subject€toÐ È-`'* Ðexport€controls€under€the€Export€Administration€Regulations€and€anyone€receiving€the€transferÏcannot€export€the€software€without€a€license€or€other€authorization.€€BXA€will€considerÏacknowledgments€in€electronic€form€provided€they€are€adequate€to€assure€legal€undertakingsÏsimilar€to€written€acknowledgments.Ìà  à8.€€Section€734.4€is€amended€by€revising€the€last€sentence€of€paragraph€ñ’ñœñ’ñ(b)ñ’ñ›ñ’ññ’ññ’ñ€to€read€asÏfollows:€ð ðCertain€encryption€commodities,€software€and€technology€controlled€under€ECCNsÏ5A992,€5D992,€and€5E992€may€be€eligible€for€òòde€minimisóó€(refer€to€ðð742.15(b)(1)).ððÐ ¨@  Ðà  à9.€€Section€734.7€is€amended€by€revising€paragraph€(c)€to€read€as€follows:Ìñ’ñœñ’ñðð734.7ñ’ñ›ñ’ññ’ññ’ñ€€Published€information€and€softwareÌñ’ñœñ’ñ*ñ’ñ›ñ’ññ’ññ’ñ€€€€€*€€€€€*€€€€€*€€€€€*Ìà  à(c)€Notwithstanding€paragraphs€(a)€and€(b)€of€this€section,€note€that€encryption€softwareÏcontrolled€under€ECCN€5D002€for€ð ðEIðð€reasons€on€the€Commerce€Control€List€(refer€toÏSupplement€No.€1€to€part€774€of€the€EAR)€remains€subject€to€the€EAR€(refer€to€ñ’ñœñ’ñðððð740.13(e)ñ’ñ›ñ’ññ’ññ’ñ€andÏ740.17(a)(5)(i)€of€the€EAR€for€release€under€license€exception).Ìò òà  àó ó10.€Section€734.8€is€amended€by€revising€the€last€sentence€of€paragraph€(a)€to€read€asÐ ¨ @ Ðfollows:€ð ðNote€that€the€provisions€of€this€section€do€not€apply€to€encryption€software€controlledÏunder€ECCN€5D002€for€€ð ðEIðð€reasons€on€the€Commerce€Control€List€(refer€to€ñ’ñœñ’ñðððð740.13(e)ñ’ñ›ñ’ññ’ññ’ñ€andÏÔ‡XHËXX™XHËÔ740.17(a)(5)(i)€of€the€EAR€for€release€under€license€exception).ððÐ H&à" ÐÔ#†™XHËXXXHË+§#Ôà  à11.€Section€734.9€is€amended€by€revising€the€last€sentence€ñ’ñœñ’ñtoñ’ñ›ñ’ññ’ññ’ñ€read€as€follows:€ð ðNote€thatÐ ((À!$ Ðthe€provisions€of€this€section€do€not€apply€to€encryption€software€controlled€under€ECCN€5D002Ïfor€€ð ðEIðð€reasons€on€the€Commerce€Control€List€(refer€to€ðððð740.13€(e)€and€740.17(a)(5)(i)€of€theÏEAR€for€release€under€license€exception).Ô‡XHËXX™XHËÔððÔ#†™XHËXXXHËX©#Ôò òÐ È-`'* ЇPART€740€„€[AMENDED]ó óÐ h Ðà  à12.€€Section€740.8€is€amended€by€revising€the€address€in€paragraph€(b)(2)€to€read€asÏñ’ñœñ’ñfollows:Ìñ’ñ›ñ’ññ’ññ’ññ’ñœñ’ñðð740.8€Key€Management€Infrastructure€(KMI)ÌÓ  Ó*€€€€€*€€€€€*€€€€€*€€€€€*¹Ó¦ªÓñ’ñ›ñ’ññ’ñœñ’ñà  àb.€€*€€€€€*€€€€€*€Ìà  àà ` à2.€*€€€€€*€€€€€*€€€€€Ì€€€€ñ’ñ›ñ’ññ’ññ’ñà  àñ’ñœñ’ñà ` àAttn:ñ’ñ›ñ’ñ€à ¸ àKMI€Encryption€Request€CoordinatorÐ ˆ  Ðà  àà ` à9800€Savage€Road,€Suite€6131Ìà  àà ` àFort€Meade,€MD€20755„6000Ìà  àà ` àà ¸ àà  àà h à*€€€€€*€€€€€*€€€€€*€€€€€*Ìà  à13.€€Section€740.13€is€amended€by:Ìà  àa.€By€revising€the€introductory€paragraph;Ìà  àb.€By€revising€paragraph€(d)(2);€andÌà  àc.€By€adding€new€paragraph€(e)€to€read€as€follows:€Ìñ’ñœñ’ñðð740.13ñ’ñ›ñ’ññ’ññ’ñ€Technology€and€software€unrestricted€(TSU)Ìñ’ñœñ’ññ’ñ›ñ’ññ’ññ’ññ’ñœñ’ñThisñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñlicenseñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñexceptionñ’ñ›ñ’ññ’ññ’ñ€authorizes€exports€and€reexports€of€operation€technology€and€software;Ïsales€technology€and€software;€software€updates€(bug€fixes);€ð ðmass€marketðð€software€subject€toÏthe€General€Software€Note;€and€unrestricted€encryption€source€code.€€Note€that€encryptionÏsoftware€is€ñ’ñœñ’ñnotñ’ñ›ñ’ññ’ññ’ñ€subject€to€the€General€Software€Note€(see€paragraph€(d)(2)€of€this€section).Ìñ’ñœñ’ñÓ  Ó*€€€€€*€€€€€*€€€€€*€€€€€*Ìñ’ñ›ñ’ññ’ññ’ñÓÞ¯Óà  à(d)€*€€€€€*€€€€€*Ð È-`'* Ðà  àà ` à(2)€òòSoftware€not€eligible€for€this€license€exceptionóó.Ô‡XHËXX™XHËÔ€This€ñ’ñœñ’ñlicenseñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñexceptionñ’ñ›ñ’ññ’ññ’ñ€is€notÐ h Ðavailable€for€certain€encryption€software€controlled€under€ECCN€5D002.€(Refer€to€theÏCryptography€Note€in€Category€5€„€part€2€of€the€Commerce€Control€List€for€information€on€MassÏMarket€Encryption€commodities€and€software.€€Also€refer€to€ððÔ#†™XHËXXXHË®°#ÔððÔ‡XHËXX™XHËÔ742.15(b)(1)€and€748.3(b)€of€theÐ    ÐEAR€for€information€on€item€classifications€for€release€from€ð ðEIðð€controls€and€ð ðNSðð€controls).€Ô#†™XHËXXXHËZ²#ÔÐ è € Ðñ’ñœñ’ñÓ  Ó*€€€€€*€€€€€*€€€€€*€€€€€*Ìñ’ñ›ñ’ññ’ññ’ñÓ\³Óà  à(e)€òòUnrestricted€encryption€source€codeóó.Ð ¨@  Ðà  àà ` àÔ‡XHËXX™XHËÔ(1)€Encryption€source€code€controlled€under€5D002,€which€would€be€consideredÐ ˆ  Ðpublicly€available€under€Ô#†™XHËXXXHË´#Ôðð734.3(b)(3)€and€which€is€not€subject€to€an€express€agreement€for€theÐ h Ðpayment€of€a€licensing€fee€or€royalty€for€commercial€production€or€sale€of€any€product€developedÏwith€the€source€code,€is€released€from€ð ðEIðð€controls€and€may€be€exported€or€reexported€withoutÏreview€under€License€Exception€TSU,€provided€you€have€submitted€written€notification€to€BXAÏof€the€Internet€location€(e.g.€URL€or€Internet€address)€or€a€copy€of€the€source€code€by€the€time€ofÏexport.€€Submit€the€notification€to€BXA€and€send€a€copy€to€ENC€Encryption€RequestÏCoordinator€(see€ðð740.17(g)(5)€for€mailing€addresses).€€Intellectual€property€protection€(e.g.,Ïcopyright,€patent€or€trademark)€will€not,€by€itself,€be€construed€as€an€express€agreement€for€theÏpayment€of€a€licensing€fee€or€royalty€for€commercial€production€or€sale€of€any€product€developedÏusing€the€source€code.Ìà  àà ` à(2)€You€may€not€knowingly€export€or€reexport€source€code€or€products€developedÏwith€this€source€code€to€Cuba,€Iran,€Iraq,€Libya,€North€Korea,€Sudan€or€Syria.Ìà  àà ` à(3)€Posting€of€the€source€code€on€the€Internet€(e.g.,€FTP€or€World€Wide€Web€site)€Ïwhere€the€source€code€may€be€downloaded€by€anyone€would€not€establish€"knowledge"€of€aÐ È-`'* Ðprohibited€export€or€reexport,€including€that€described€in€paragraph€(e)(2)€of€this€section.€€InÏaddition,€such€posting€would€not€trigger€"red€flags"€necessitating€the€affirmative€duty€to€inquireÏunder€the€"Know€Your€Customer"€guidance€provided€in€Supplement€No.€3€to€Part€ñ’ñœñ’ñ732€of€theÏEAR.ñ’ñ›ñ’ññ’ññ’ñ€Ìà  à14.€Section€740.17€is€revised€to€read€as€follows:Ìñ’ñœñ’ñðð740.17ñ’ñ›ñ’ññ’ññ’ñ€Encryption€commodities€and€software€(ENC).Ìñ’ñœñ’ññ’ñ›ñ’ññ’ññ’ñà  à(a)€òòExports€and€reexports€of€certain€encryption€commodities€and€softwareóó.Ô‡XHËXX™XHËÔ€As€enumeratedÐ ¨@  Ðin€this€section,€you€may€export€and€reexport€encryption€commodities,€software€and€componentsÏ(as€defined€in€part€ñ’ñœñ’ñ772€of€the€EAR)ñ’ñ›ñ’ññ’ññ’ñ€under€License€Exception€ENC.€€License€Exception€ENCÏcannot€be€used€if€the€encryption€commodity€or€software€provides€an€open€cryptographic€interfaceÏ(as€defined€in€part€772),€unless€the€export€is€to€a€subsidiary€of€a€U.S.€company,€as€described€inÏparagraph€(a)(1)€of€this€section.Ô#†™XHËXXXH˼#ÔÐ   Ðà  àà ` à(1)€òòEncryption€commodities,€software,€and€technology€for€U.S.€subsidiariesóó.€Ô‡XHËXX™XHËÔYouÐ è€ Ðmay€export€and€reexport€any€encryption€item€of€any€key€length€under€ECCNs€5A002,€5D002€andÏ5E002€to€foreign€subsidiaries€of€U.S.€companies€(as€defined€in€part€772)€without€review€andÏclassification.€€This€includes€source€code€and€technology€for€internal€company€use,€such€as€theÏdevelopment€of€new€products.€€U.S.€firms€may€also€transfer€under€License€Exception€ENCÏencryption€technology€(5E002)€to€their€foreign€employees€in€the€U.S.,€(except€nationals€ò òofó ó€Cuba,Ð H&à" ÐIran,€Iraq,€Libya,€North€Korea,€Sudan€or€Syria)€for€internal€company€use,€including€theÏdevelopment€of€new€products.€€All€items€produced€or€developed€by€U.S.€subsidiaries€withÏencryption€commodities,€software€and€technology€exported€under€this€paragraph€are€subject€toÏthe€EAR€and€require€review€and€classification€before€any€sale€or€retransfer€outside€of€the€U.S.Ð È-`'* Ðcompany.€Ô#†™XHËXXXH˶¾#ÔÐ h Ðà  àà ` à(2)€òòEncryption€commodities€and€softwareóó.Ô‡XHËXX™XHËÔ€You€may€export€and€reexport€anyÐ Hà Ðencryption€commodity,€software€and€Ô#†™XHËXXXHËÞÂ#ÔcomponentÔ‡XHËXX™XHËÔ€after€review€and€classification€by€BXA€underÐ ( À ÐECCNs€5A002€and€5D002Ô‡LgüLXXHËÔ€to€any€individual,€commercial€firm€or€other€non„government€end„user.€Ð    ÐÔ#†XHËXLLgü÷Ã#ÔÔ#†™XHËXXXHËÃ#ÔEncryption€products€classified€under€this€paragraph€require€a€license€for€export€and€reexport€toÐ è € Ðgovernment€end„users€(as€defined€in€part€772).€€The€former€restriction€limiting€exports€orÏreexports€to€internal€company€proprietaryÔ‡™LgüLX™XHËÔ€use€is€removed.€Ô#†™XHËXL™Lgü°Å#ÔÐ ¨@  Ðà  àà ` à(3)€òòRetail€encryption€commodities€and€softwareóó.€You€may€export€and€reexport€toÐ ˆ  Ðany€end„user€encryption€commodities,€software€and€components€which€have€been€reviewed€and€Ïclassified€as€retail€under€ECCNs€5A002€and€5D002.€€Retail€encryption€commodities,€softwareÏand€components€are€products:€Ìñ’ñœñ’ñà  àñ’ñ›ñ’ññ’ññ’ñà ` àà ¸ à(i)€ñ’ñœñ’ñGenerallyñ’ñ›ñ’ññ’ññ’ñ€available€to€the€public€by€means€of€any€of€the€following:€Ìà  àà ` àà ¸ àà  à(A)€soldòò€óóin€tangible€form€through€retail€outlets€independent€of€theÐ è€ Ðmanufacturer;€€Ìà  àà ` àà ¸ àà  à(B)€specifically€designed€for€individual€consumer€use€and€sold€orÏtransferred€through€tangible€or€intangible€means;€orÌà  àà ` àà ¸ àà  à(C)€sold€in€large€volume€without€restriction€through€mail€orderÏtransactions,€electronic€transactions,€or€telephone€call€transactions;€òòandóó€€Ð H&à" Ðà  àà ` àà ¸ à(ii)€ñ’ñœñ’ñMeetingñ’ñ›ñ’ññ’ññ’ñ€all€of€the€following:Ìà  àà ` àà ¸ àà  à(A)€the€cryptographic€functionality€cannot€be€easily€changed€by€theÏuser;Ìà  àà ` àà ¸ àà  à(B)€do€not€require€substantial€support€for€installation€and€use;€Ð È-`'* Ðà  àà ` àà ¸ àà  à(C)€the€cryptographic€functionality€has€not€been€modified€orÏcustomized€to€customer€specification;€andÌà  àà ` àà ¸ àà  à(D)€are€not€network€infrastructure€products€such€as€high€endÏrouters€or€switches€designed€for€large€volume€communications.€€Ìà  àà ` àà ¸ à(iii)€Subject€to€the€criteria€in€paragraphs€(a)(3)(i)€and€(ii)€of€this€section,Ïretail€encryption€products€include€(but€are€not€limited€to)€general€purpose€operating€systems€andÏtheir€associated€user„interface€client€software€or€general€purpose€operating€systems€withÏembedded€networking€and€server€capabilities;€non„programmable€encryption€chips€and€chips€thatÏare€constrained€by€design€for€retail€products;€low„end€routers,€firewalls€and€networking€or€cableÏequipment€designed€for€small€office€or€home€use;€programmable€database€management€systemsÏand€associated€application€servers;€low„end€servers€and€application„specific€servers€(includingÏclient„server€applications,€e.g.,€Secure€Socket€Layer€(SSL)„based€applications)€that€interfaceÏdirectly€with€the€user;€and€encryption€products€distributed€without€charge€or€through€free€orÏanonymous€downloads.Ìà  àà ` àà ¸ à(iv)€Encryption€products€and€ñ’ñœñ’ñnetwork„basedñ’ñ›ñ’ññ’ññ’ñ€applications€which€provideÏfunctionality€equivalent€to€other€encryption€products€classified€as€retail€will€be€considered€retail.€€Ïà  àà ` àà ¸ à(v)€Ô‡™LgüLX™XHËÔEncryption€products€exported€or€reexported€under€paragraph€(a)(3)€ofÐ h$  Ðthis€section€can€be€used€to€provide€services€to€any€entity.Ô#†™XHËXL™LgüwÑ#Ôò òÐ H&à" Ðó óà  àà ` àà ¸ à(vi)€Finance„specific€encryption€commodities€and€software€of€any€keyÐ  (¸!$ Ðlength€restricted€by€design€(e.g.,€highly€field„formatted€with€validation€procedures€and€not€easilyÏdiverted€to€other€end„uses)€and€used€to€secure€financial€communications€such€as€electronicÏcommerce€will€be€considered€retail€encryption€products.Ð À-X'* Ðà  àà ` àà ¸ à(vii)€56„bit€products€with€key€exchange€mechanisms€greater€than€512€bitsÏand€up€to€and€including€1024€bits,€or€equivalent€products€not€classified€as€mass€market,€will€beÏconsidered€retail.€Ìà  àà ` àñ’ñœñ’ñ(4)ñ’ñ›ñ’ññ’ññ’ñ€òòInternet€and€Telecommunications€service€providersóó.Ô‡XHËXX™XHËÔ€Certain€restrictions€applyÐ    Ðto€Internet€and€telecommunications€service€providers.€€Any€Internet€or€telecommunicationsÏservice€provider€can€obtain€retail€products€under€License€Exception€ENC€and€use€them€toÏprovide€any€service€to€any€entity.€€Internet€and€telecommunications€service€providers€can€obtainÏand€use€any€encryption€product€for€their€internal€use€and€to€provide€any€service€under€LicenseÏException€ENC.€€However,€a€license€is€required€for€the€use€of€any€product€not€classified€as€retailÏto€provide€services€specific€to€ñ’ñœñ’ñgovernmentñ’ñ›ñ’ññ’ññ’ñ€end„users,€e.g.,€WAN,€LAN,€VPN,€voice€andÏdedicated-link€services;€application€specific€and€e„commerce€services€and€Ô% €G ÔPKI€encryptionÏservices€specifically€for€government€end„users€only.€ÌÔ#†™XHËXXXHËFÕ#Ôà  àà ` à(5)€òòCommercial€encryption€source€code€and€general€purpose€toolkitsóó.Ô‡XHËXX™XHËÔ€You€mayÐ è€ Ðexport€and€reexport€encryption€source€code€not€released€under€Ô#†™XHËXXXHËÿØ#ÔððÔ‡XHËXX™XHËÔ740.13(e)€or€general€purposeÐ È` Ðtoolkits€(application€specific€toolkits€are€covered€under€components,€as€defined€in€part€Ô#†™XHËXXXHË Ù#Ô772),Ð ¨ @ Ðsubject€to€the€following€provisions:Ìà  àà ` àà ¸ à(i)€Encryption€source€code,€which€would€be€considered€publicly€availableÏunder€ðð734.3(b)(3)€ñ’ñœñ’ñof€the€EAR€andñ’ñ›ñ’ññ’ññ’ñ€which€is€subject€to€an€express€agreement€for€the€payment€of€aÏlicensing€fee€or€royalty€for€commercial€production€or€sale€of€any€product€developed€using€theÏsource€code,€can€be€exported€or€reexported€using€License€Exception€ENC€to€any€end„userÏwithout€review€and€classification,€provided€you€have€submitted€to€BXA,€Ô‡<XHËXX™XHËÔby€the€time€of€export,Ô#†™XHËXX<XHË—Ü#ÔÐ è+€%( Ðwritten€notification€of€the€Internet€location€(e.g.€URL€or€Internet€address)€or€a€copy€of€the€sourceÐ È-`'* Ðcode.€€You€may€not€knowingly€export€or€reexport€source€code€or€products€developed€with€thisÏsource€code€to€Cuba,€Iran,€Iraq,€Libya,€North€Korea,€Sudan€or€Syria.€€Posting€of€the€source€codeÏon€the€Internet€(e.g.,€FTP€or€World€Wide€Web€site)€where€the€source€code€may€be€downloadedÏby€anyone€would€not€establish€"knowledge"€of€a€prohibited€export€or€reexport.€€In€addition,€suchÏposting€would€not€trigger€"red€flags"€necessitating€the€affirmative€duty€to€inquire€under€theÏ"Know€Your€Customer"€guidance€provided€in€Supplement€No.€3€to€part€ñ’ñœñ’ñ732€of€the€EAR.ñ’ñ›ñ’ññ’ññ’ñ€Ìñ’ñœñ’ññ’ñ›ñ’ññ’ññ’ñà  àà ` àà ¸ à(ii)€Encryption€source€code€which€would€neither€be€considered€publiclyÏavailable€nor€includes€source€code€that€when€compiled€provides€an€open€cryptographic€interfaceÏ(see€ðð740.17(f)),€may€be€exported€or€reexported€using€License€Exception€ENC€to€any€non„¼government€end„user€after€review€and€classification€by€BXA.€Ìà  àà ` àà ¸ à(iii)€General€purpose€encryption€toolkits€may€be€exported€or€reexportedÏafter€review€and€classification€by€BXA€under€License€Exception€ENC€to€any€non„governmentÏend„user.€Ìà  àà ` àà ¸ à(iv)€Any€foreign€product€developed€for€commercial€sale€using€encryptionÏsource€code€or€general€purpose€toolkits€exported€under€paragraph€(a)(5)€of€this€section€is€subjectÏto€reporting€requirements€under€paragraph€(g)(3)€of€this€section.€€Foreign€products€developed€byÏbundling€or€compiling€of€source€code€are€not€subject€to€this€reporting€requirement.€€Ìà  à(b)€òòIneligible€destinationsóó.€No€encryption€item(s)€may€be€exported€or€reexported€underÐ H&à" Ðthis€license€exception€to€Cuba,€Iran,€Iraq,€Libya,€North€Korea,€Sudan€or€Syria.€€€€Ìà  àñ’ñœñ’ñ(c)€òòTransfersóó.€Transfers€of€encryption€items€listed€in€paragraph€(a)€of€this€section€toÐ * #& Ðgovernment€end„users€or€end„uses€within€the€same€country€are€prohibited€unless€otherwiseÏauthorized€by€license€or€license€exception.ñ’ñ›ñ’ññ’ññ’ñÐ È-`'* Ðà  à(d)€òòExports€and€reexports€of€foreign€products€incorporating€U.S.€encryption€source€code,Ð h Ðcomponents€or€general€purpose€encryption€toolkitsóó.€€Foreign€products€developed€with€orÐ Hà Ðincorporating€U.S.„origin€encryption€source€code,€components€or€toolkits€remain€subject€to€theÏEAR,€but€do€not€require€review€and€classification€by€BXA€and€can€be€exported€or€reexportedÏwithout€further€authorization.Ìà  à(e)€òòEligibility€for€License€Exception€ENCóó.€€Ð È`  ÐÌà  àà ` à1)€òòReview€and€classificationóó.€You€may€initiate€review€and€classification€of€yourÐ ˆ  Ðencryption€ñ’ñœñ’ñcommodities€and€softwareñ’ñ›ñ’ññ’ññ’ñ€as€required€by€paragraph€(a)€of€this€section€by€submitting€aÏclassification€request€in€accordance€with€the€provisions€of€ðð748.3(b)€and€Supplement€6€to€partÏ742€of€the€EAR.€€Indicate€ð ðLicense€Exception€ENCðð€in€Block€9:€Special€purpose,€on€form€BXA„¼748P.€€Submit€the€original€request€to€BXA€in€accordance€with€ðð748.3€of€the€EAR€and€send€aÏcopy€of€the€request€to€ENC€Encryption€Request€Coordinator€(see€paragraph€(g)(5)€of€this€sectionÏfor€mailing€addresses).€€Thirty€days€after€receipt€of€a€complete€classification€request€by€BXA,Ïunless€otherwise€notified€by€BXA,€exporters€may€export€and€reexport€to€any€non„governmentÏend„user€any€encryption€product€eligible€under€paragraphs€(a)(2),€(a)(4)€and€(a)(5)€of€this€section.€ÏNo€exports€to€government€end„users€are€allowed€under€this€provision,€and€BXA€reserves€theÏright€to€suspend€eligibility€to€export€while€a€classification€is€pending.€Ìà  àà ` à(2)€òòGrandfatheringóó.€€Finance„specific€and€56„bit€products€previously€reviewed€andÐ ((À!$ Ðclassified€by€BXA€can€be€exported€or€reexported€to€any€end„user€without€further€review.€€OtherÏencryption€commodities,€software€or€components€previously€approved€for€export€can€be€exportedÏand€reexported€without€further€review€to€any€non„government€end„user€under€the€provisions€ofÐ È-`'* Ððð740.17€(a).€€This€includes€products€approved€under€a€license,€an€Encryption€LicensingÏArrangement,€or€previously€classified€as€eligible€to€use€License€Exception€ENC€(except€for€thoseÏproducts€which€were€only€authorized€for€export€to€U.S.€subsidiaries).€€Exports€to€governmentÏend„users€require€a€license€unless€BXA€has€classified€the€product€as€a€ð ðretailðð€product€underÏparagraph€(a)(3)€of€this€section.€Ìà  àà ` à(3)€òòKey€Length€Increasesóó.€€Exporters€can€increase€the€key€lengths€of€previouslyÐ È`  Ðclassified€products€and€continue€to€export€without€another€review.€€No€other€change€in€theÏcryptographic€functionality€is€allowed.ò òÐ ˆ  Ðà  àà ` àà ¸ àó ó(i)€Any€product€previously€classified€as€5A002€or€5D002€can,€with€anyÐ h Ðupgrade€to€the€key€length€used€for€confidentiality€or€key€exchange€algorithms,€be€exported€orÏreexported€under€provisions€of€License€Exception€ENC€to€any€non„government€end„user€withoutÏan€additional€review.€€Another€classification€is€necessary€to€determine€eligibility€as€a€ð ðretailððÏproduct€under€paragraph€(a)(3)€of€this€section.ò òÐ è€ Ðà  àà ` àó óà ¸ à(ii)€Exporters€must€certify€to€BXA€in€a€letter€from€a€corporate€official€thatÐ È` Ðthe€only€change€to€the€encryption€product€is€the€key€length€for€confidentiality€or€key€exchangeÏalgorithms€and€there€is€no€other€change€in€cryptographic€functionality.€€Certifications€mustÏinclude€the€original€authorization€number€issued€by€BXA€and€the€date€of€issuance.€€BXA€mustÏreceive€this€certification€prior€to€any€export€of€an€upgraded€product.€€The€certification€should€beÏsent€to€BXA,€with€a€copy€sent€to€the€ENC€Encryption€Request€Coordinator€(see€paragraph€(g)(5)Ïof€this€section€for€mailing€ñ’ñœñ’ñaddresses).ñ’ñ›ñ’ññ’ññ’ñÌà  à(f)€òòOpen€cryptographic€interfacesóó.€License€Exception€ENC€shall€not€apply€to€exports€orÐ è+€%( Ðreexports€of€encryption€commodities,€software€and€components€(unless€exported€to€a€subsidiaryÐ È-`'* Ðof€a€U.S.€company€under€paragraph€(a)(1)€of€this€section)òò,óó€if€the€encryption€product€provides€anÐ h Ðopen€cryptographic€interface€(as€defined€in€part€772).€€This€does€not€apply€to€source€code€thatÏwould€be€considered€publicly€available€under€ðð734.3(b)(3).Ìà  à(g)€òòReporting€requirementsóó.Ð    Ðà  àà ` à(1)€No€reporting€is€required€for€exports€of:€Ìà0  àà0` (#(#àà ¸ à(i)€Any€encryption€to€U.S.€subsidiaries;Ð ` (#` (# Ðà0  àà ` àà ¸ à(ii)€Finance„specific€products;Ð (#(# ÐÌà  àà ` àà ¸ à(iii)€Encryption€commodities€or€software€with€a€symmetric€key€length€notÏexceeding€64€bits€or€otherwise€classified€as€qualifying€for€mass€market€treatment;Ìà  àà ` àà ¸ à(iv)€Retail€products€exported€to€individual€consumers;€Ìà  àà ` àà ¸ à(v)€Any€export€made€via€free€or€anonymous€download;€andÌà  àà ` àà ¸ à(vi)€Any€export€made€from€or€to€a€U.S.€bank,€financial€institution€or€theirÏsubsidiaries,€affiliates,€customers€or€contractors€for€banking€or€financial€operations.Ìà  àà ` à(2)€Exporters€must€provide€all€available€information€as€follows:Ìà  àà ` àà ¸ à(i)€For€items€exported€to€a€distributor€or€other€reseller,€the€name€andÏaddress€of€the€distributor€or€reseller€and€the€quantity€exported€and,€if€collected€in€the€normalÏcourse€of€business,€the€end„userððs€name€and€address;€Ìà  àà ` àà ¸ à(ii)€For€items€exported€through€direct€sale,€the€name€and€address€of€theÏrecipient€and€the€quantity€exported€(except€for€retail€products€if€the€end„user€is€an€individualÏconsumer);€andÌà  àà ` à(3)€For€direct€sales€or€transfers€of€encryption€components,€commercial€sourceÐ È-`'* Ðcode€described€under€ñ’ñœñ’ñðð740.17(a)(5)ñ’ñ›ñ’ññ’ññ’ñ€or€general€purpose€encryption€toolkits€to€foreignÏmanufacturers,€you€must€submit€the€names€and€addresses€of€the€manufacturers€using€suchÏencryption€components,€commercial€source€code€or€general€purpose€encryption€toolkits€and€aÏnon„proprietary€technical€description€of€the€products€for€which€the€component,€source€code€orÏtoolkit€are€being€used€(e.g.,€brochures,€other€documentation,€descriptions€or€other€identifiers€ofÏthe€final€foreign€product;€the€algorithm€and€key€lengths€used;€general€programming€interfaces€toÏthe€product,€if€known;€any€standards€or€protocols€that€the€foreign€product€adheres€to;€and€sourceÏcode,€if€available).ÌÌà  àà ` à(4)€Exporters€of€encryption€commodities,€software€and€components€which€wereÏpreviously€classified€under€License€Exception€ENC,€or€which€have€been€licensed€for€exportÏunder€an€Encryption€Licensing€Arrangement,€must€comply€with€the€reporting€requirements€ofÏthis€section.Ìà  àà ` à(5)€Beginning€[INSERT€Date€of€€Publication],€you€must€submit€reports€requiredÏunder€this€section€semi„annually€to€BXA,€unless€otherwise€provided€in€this€paragraph.€€ForÏexports€occurring€between€January€1€and€June€30,€a€report€is€due€no€later€than€August€1.€€ForÏexports€occurring€between€July€1€and€December€31,€a€report€is€due€no€later€than€February€1.€€ForÏexports€and€reexports€to€Internet€and€telecommunications€service€providers€of€networkÏinfrastructure€products€(e.g.,€high„end€routers€or€switches€designed€for€large€volumeÏcommunications),€reports€are€due€by€the€time€of€export.€€Reports€must€include€the€classificationÏor€other€authorization€number.€€These€reports€must€be€provided€in€electronic€form€to€BXA;Ïsuggested€file€formats€for€electronic€submission€include€spreadsheets,€tabular€text€or€structuredÐ È-`'* Ðtext.€€Exporters€may€request€other€reporting€arrangements€with€BXA€to€better€reflect€theirÏbusiness€models.€€Reports€should€be€sent€electronically€to€crypt@bxa.doc.gov,€or€disks€and€CDsÏcan€be€mailed€to€the€following€addresses:Ìà  àà ` àà ¸ à(i)€Department€of€CommerceÌà  àà ` àà ¸ àBureau€of€Export€AdministrationÌà  àà ` àà ¸ àOffice€of€Strategic€Trade€and€Foreign€Policy€ControlsÌà  àà ` àà ¸ à14th€Street€and€Pennsylvania€Ave.,€N.W.,€Room€2705Ìà  àà ` àà ¸ àWashington,€D.C.€€20230Ìà  àà ` àà ¸ àAttn:€Encryption€ReportsÌÌà  àà ` àà ¸ à(ii)€A€copy€of€the€report€should€be€sent€to:Ìà  àà ` àà ¸ àAttn:€ENC€Encryption€Request€CoordinatorÌà  àà ` àà ¸ à9800€Savage€Road,€Suite€6131Ìà  àà ` àà ¸ àFt.€Meade,€MD€€20755„6000Ìñ’ñœñ’ñ(h)ñ’ñ›ñ’ññ’ññ’ñ€òòDistributors€and€Resellersóó.€U.S.€or€foreign€distributors,€resellers€or€other€entities€who€are€notÐ ¨ @ Ðoriginal€manufacturers€of€encryption€commodities€and€software€are€permitted€to€use€LicenseÏException€ENC€only€in€instances€where€the€export€or€reexport€meets€the€applicable€terms€andÏconditions€of€ðð740.17.Ìñ’ñœñ’ñò òPARTñ’ñ›ñ’ññ’ññ’ñ€742€„€[AMENDED]ó óÐ ((À!$ Ðà  à15.€Section€742.15€is€revised€to€read€as€follows:Ìñ’ñœñ’ñðð742.15ñ’ñ›ñ’ññ’ññ’ñ€€ENCRYPTION€ITEMSÌñ’ñœñ’ñEncryptionñ’ñ›ñ’ññ’ññ’ñ€items€can€be€used€to€maintain€the€secrecy€of€information,€and€thereby€may€be€used€byÐ È-`'* Ðpersons€abroad€to€harm€national€security,€foreign€policy€and€law€enforcement€interests.€€The€U.S.Ïhas€a€critical€interest€in€ensuring€that€important€and€sensitive€information€of€the€public€andÏprivate€sector€is€protected.€€Consistent€with€our€international€obligations€as€a€member€of€theÏWassenaar€Arrangement,€the€U.S.€has€a€responsibility€to€maintain€control€over€the€export€ofÏencryption€items.€€As€the€President€indicated€in€ñ’ñœñ’ñExecutive€Order€13026ñ’ñ›ñ’ññ’ññ’ñ€and€in€his€MemorandumÏof€November€15,€1996,€export€of€encryption€software,€like€export€of€encryption€hardware,€isÏcontrolled€because€of€this€functional€capacity€to€encrypt€information€on€a€computer€system,€andÏnot€because€of€any€informational€or€theoretical€value€that€such€software€may€reflect,€contain,€orÏrepresent,€or€that€its€export€may€convey€to€others€abroadòò.óó€€For€this€reason,€export€controls€onÐ h Ðencryption€software€are€distinguished€from€controls€on€other€software€regulated€under€the€EAR.ÌÌà  à(a)€òòLicense€requirementsóó.€Licenses€are€required€for€exports€and€reexports€to€allÐ   Ðdestinations,€except€Canada,€for€items€controlled€under€ECCNs€having€an€ð ðEIðð€(for€ð ðencryptionÏitemsðð)€under€the€ð ðControl(s)ðð€paragraph.€€Such€items€include:€encryption€commoditiesÏcontrolled€under€ECCN€5A002;€encryption€software€controlled€under€ECCN€5D002;€andÏencryption€technology€controlled€under€ECCN€5E002.€€Refer€to€part€772€of€the€EAR€for€theÏdefinition€of€ð ðencryption€itemsðð.Ìà  à(b)€òòLicensing€policyóó.€The€following€licensing€policies€apply€to€items€identified€inÐ H&à" Ðparagraph€(a)€of€this€section.€€Except€as€otherwise€noted,€applications€will€be€reviewed€on€a€case„¼by„case€basis€by€BXA,€in€conjunction€with€other€agencies,€to€determine€whether€the€export€orÏreexport€is€consistent€with€U.S.€national€security€and€foreign€policy€interests.€€For€subsequentÏbundling€and€updates€of€these€items€see€paragraph€(n)€of€ðð770.2€of€the€EAR.€€Ð È-`'* Ðà  àà ` à(1)€òòEncryption€commodities,€software€and€technology€under€ECCNs€5A992,Ð h Ð5D992€and€5E992óó.€€Certain€encryption€commodities,€software€and€technology€may,€afterÐ Hà Ðclassification€by€BXA€as€ECCNs€5A992,€5D992€or€5E992,€be€released€from€ð ðEIðð€ò òor€ð ðNSððó óÐ ( À Ðcontrols.€€Items€controlled€under€these€ECCNs€are€eligible€for€export€and€reexport€to€allÏdestinations€except€Cuba,€Iran,€Iraq,€Libya,€North€Korea,€Sudan€or€Syria.€€Refer€to€ðð748.3(b)(3)Ïof€the€EAR€for€additional€information€regarding€classification€requests.€€The€followingÏencryption€items€may€be€eligible€for€such€treatment:€Ìà  àà ` àà ¸ à(i)€òò56„bit€encryption€commodities,€software€and€technologyóó.€€EncryptionÐ ˆ  Ðcommodities,€software€and€technology€up€to€and€including€56„bits€with€an€asymmetric€keyÏexchange€algorithm€not€exceeding€512€bits€may€be€classified€under€ECCNs€5A992,€5D992€orÏ5E992.€ÌÌà  àà ` àà ¸ à(ii)€òòKey€management€productsóó.€€Products€which€only€provide€keyÐ è€ Ðmanagement€with€asymmetric€key€exchange€algorithms€not€exceeding€512€bits€may€be€eligibleÏfor€classification€under€ECCNs€5A992€or€5D992.Ìà  àà ` àà ¸ à(iii)€òò64„bit€mass€market€encryption€commodities€and€softwareóó.€(A)€MassÐ ˆ"  Ðmarket€encryption€commodities€and€software€with€key€lengths€not€exceeding€64„bit€for€theÏsymmetric€algorithm€may€be€eligible€for€classification€by€BXA€under€ECCNs€5A992€or€5D992.€ÏRefer€to€the€Cryptography€Note€(Note€3)€to€part€2€of€Category€5€of€the€CCL€for€a€definition€ofÏmass€market€encryption€commodities€and€software.€€Key€exchange€mechanisms,€proprietary€keyÏexchange€mechanisms,€or€company€proprietary€commodities€and€software€implementations€mayÏalso€be€eligible€for€this€treatment.€€Refer€to€Supplement€No.€6€to€part€742€and€ðð748.3(b)(3)€of€theÐ È-`'* ÐEAR€for€additional€information.€€Ìà  àà ` àà ¸ àà  à(B)€Mass€market€encryption€commodities€and€software€(e.g.,€40Ïand€56„bit€DES€or€equivalent)€previously€eligible€for€License€Exception€TSU€(or€for€hardware,ÏENC)€may€increase€key€lengths€for€the€confidentiality€algorithm€up€to€64€bits€and€still€beÏexported€as€a€mass€market€product€without€an€additional€review.€€Exporters€must€certify€to€BXAÏin€a€letter€from€a€corporate€official€the€only€change€to€the€encryption€product€is€the€key€length€forÏconfidentiality€or€key€exchange€algorithms€and€there€is€no€other€change€in€cryptographicÏfunctionality.€€Certifications€must€include€the€original€authorization€number€issued€by€BXA€andÏthe€date€of€issuance.€€BXA€must€receive€this€certification€prior€to€any€export€of€upgradedÏproducts.€€The€certification€should€be€sent€to€BXA,€with€a€copy€to€ENC€Encryption€RequestÏCoordinator€at€the€following€addresses:ÌÌà  àà ` àà ¸ àà  àà h à(òò1óó)€Department€of€CommerceÐ è€ Ðà  àà ` àà ¸ àà  àà h àBureau€of€Export€AdministrationÌà  àà ` àà ¸ àà  àà h àOffice€of€Strategic€Trade€and€Foreign€Policy€ControlsÌà  àà ` àà ¸ àà  àà h à14th€Street€and€Pennsylvania€Ave.,€N.W.,€Room€2705Ìà  àà ` àà ¸ àà  àà h àWashington,€D.C.€€20230Ìà  àà ` àà ¸ àà  àà h àÌà  àà ` àà ¸ àà  àà h à(òò2óó)€A€copy€of€the€report€should€be€sent€to:Ð ((À!$ Ðà  àà ` àà ¸ àà  àà h àAttn:€ENC€Encryption€Request€CoordinatorÌà  àà ` àà ¸ àà  àà h à9800€Savage€Road,€Suite€6131Ìà  àà ` àà ¸ àà  àà h àFt.€Meade,€MD€€20755„6000Ð È-`'* Їà  àà ` àà ¸ à(iv)€€For€classification€of€these€encryption€items€under€these€ECCNs,€markÏð ðNLRðð€in€Block€9:€Special€purpose,€on€form€BXA„748P,€of€your€classification€request.Ìà  àà ` à(2)€òòEncryption€commodities€and€software€eligible€for€classification€under€ECCNsÐ ( À Ð5A002,€5D002€and€5E002€and€qualified€for€License€Exception€ENCóó.€Items€classified€by€BXA€asÐ    Ðretail€products€under€ECCNs€5A002€and€5D002ò ò€ó óare€permitted€for€export€and€reexport€to€any€end„Ð è € Ðuser.€€All€other€encryption€commodities,€software€and€components€classified€by€BXA€underÏECCNs€5A002€and€5D002€may€be€exported€to€any€individual,€commercial€firm€or€other€non„¼government€end„user.€€Any€encryption€item€(including€technology€classified€under€5E002)€willÏbe€permitted€for€export€or€reexport€to€U.S.€subsidiaries€(as€defined€in€part€772).€€ProductsÏdeveloped€using€U.S.€encryption€items€are€subject€to€the€EAR.€€No€exports€are€authorized€toÏCuba,€Iran,€Iraq,€Libya,€North€Korea,€Sudan€or€Syria.€ÌÌà  àà ` à(3)€òòEncryption€licensingóó.€€Exporters€may€submit€applications€for€licenses€orÐ è€ ÐEncryption€Licensing€Arrangements€for€exports€and€reexports€of€encryption€items€not€eligible€forÏlicense€exception,€including€exports€and€reexports€of€encryption€technology€to€strategic€partnersÏof€U.S.€companies€(as€defined€in€part€772).€€For€Encryption€Licensing€Arrangements,€theÏapplicant€must€specify€the€sales€territory€and€class€of€end„user.€€Encryption€LicensingÏArrangements€ñ’ñœñ’ñgrantedñ’ñ›ñ’ññ’ññ’ñ€for€exports€of€unlimited€quantities€for€all€destinations€except€Cuba,€Iran,ÏIraq,€Libya,€North€Korea,€Sudan€or€Syria,€ñ’ñœñ’ñare€validñ’ñ›ñ’ññ’ññ’ñ€for€four€years,€andòò€óómay€require€reporting.òò€Ð ((À!$ ÐóóLicenses€are€required€for€exports€of€encryption€items€to€governments,€or€Internet€andÐ * #& Ðtelecommunications€service€providers€for€the€provision€of€services€specific€to€governments,€andÏmay€be€favorably€considered€for€civil€uses,€e.g.,€social€or€financial€services€to€the€public;€civilÐ È-`'* Ðjustice;€social€insurance,€pensions€and€retirement;€taxes€and€communications€betweenÏgovernments€and€their€citizens.Ìà  à16.€Supplement€No.€6€to€part€742€is€revised€to€read€as€follows:ÌÓ  ÓSUPPLEMENT€NO.€6€TO€PART€742„„GUIDELINES€FOR€SUBMITTING€AÏCLASSIFICATION€REQUEST€FOR€ENCRYPTION€ITEMSÌÓ©+ÓÌClassification€requests€for€encryption€items€must€be€submitted€on€Form€BXA„748P,€€inÏaccordance€with€ðð748.3€of€the€EAR.€€Insert€in€Block€9:€Special€Purpose€of€the€Form€BXA„748P,Ïthe€phrase€ð ðLicense€Exception€ENCðð€or€ð ðNLRðð,€based€on€your€classification€request.€€Failure€toÏinsert€this€phrase€will€delay€processing.€€In€addition,€the€Bureau€of€Export€AdministrationÏrecommends€that€such€requests€be€delivered€via€courier€service€to:€Bureau€of€ExportÏAdministration,€Office€of€Exporter€Services,€Room€2705,€€14th€Street€and€Pennsylvania€Ave.,ÏN.W.€Washington,€D.C.€20230.€€In€addition,€you€must€send€a€copy€of€the€request€and€allÏsupporting€documents€to:€Attn:€ENC€Encryption€Request€Coordinator,€9800€Savage€Road,€SuiteÏ6131,€Fort€Meade,€MD€20755„6000.Ìà  à(a)€Requests€for€encryption€items€will€be€processed€in€thirty€(30)€days€from€receipt€of€aÏproperly€completed€request.€Ìà  à(b)€To€submit€a€classification€request€for€a€technical€review€of€commodities€and€software,Ïensure€that€the€information€provided€includes€brochures€or€other€documentation€or€specificationsÏ(to€include€applicable€cryptographic€source€code)€related€to€the€technology,€commodity€orÏsoftware,€as€well€as€any€additional€information€which€you€believe€would€assist€the€reviewÏprocess.€€You€must€provide€the€following€information€in€a€cover€letter€to€the€classificationÐ È-`'* Ðrequest:Ìà  àà ` à(1)€Clearly€state€at€the€top€of€the€page€either€ð ðENCðð€or€ð ðNLRðð€„€30€Day€TechnicalÏReview€Requested;ððÌà  àà ` à(2)€State€that€you€have€reviewed€and€determined€that€the€commodity€or€softwareÏsubject€to€the€classification€request€meets€the€criteria€of€this€Supplement;Ìñ’ñœñ’ñà  àñ’ñ›ñ’ññ’ññ’ñà ` à(3)€State€the€name€of€the€commodity€or€software€product€being€submitted€forÏreview;€€Ìà  àà ` à(4)€State€how€the€commodity€or€software€has€been€written€to€preclude€userÏmodification€of€the€encryption€algorithm,€key€management€mechanism,€and€key€space;Ìà  àà ` à(5)€State€that€a€duplicate€copy€has€been€sent€to€the€ENC€Encryption€RequestÏCoordinator;à ` àÐ (À Ðà  àà ` à(6)€Provide€the€following€information€for€the€commodity€or€software€à Ð àÐ   Ðproduct:Ìà  àà ` àà ¸ à(i)€Description€of€all€encryption€algorithms€and€key€lengths,€e.g.€sourceÏcode,€and€how€the€algorithms€are€used.€€If€any€combination€of€different€algorithms€are€used€inÏthe€same€product,€also€state€how€each€is€applied€to€the€data.Ìà  àà ` àà ¸ à(ii)€Pre„processing€information€of€plaintext€data€before€encryption€(e.g.Ïcompression€of€the€data).Ìà  àà ` àà ¸ à(iii)€Post„processing€information€of€cipher€text€data€after€encryption€(e.g.Ïpacketization€of€the€encrypted€data).Ìà  àà ` àà ¸ à(iv)€For€classification€requests€regarding€object€code€or€Java€byte€code,Ïdescribe€what€techniques€(including€obfuscation,€private€access€modifiers,€final€classes)€are€usedÐ È-`'* Ðto€protect€against€decompilation€and€misuse.Ìà  àà ` àà ¸ à(v)€For€classification€requests€regarding€components:Ìà  àà ` àà ¸ àà  à(A)€Reference€the€application€for€the€components€if€known;Ìà  àà ` àà ¸ àà  à(B)€State€if€there€is€a€general€programming€interface€to€theÏcomponent;Ìà  àà ` àà ¸ àà  à(C)€State€whether€the€component€is€constrained€by€function;Ìà  àà ` àà ¸ àà  à(D)€List€any€standards€and€protocols€that€the€component€adheresÏto;Ìà  àà ` àà ¸ àà  à(E)€Include€a€complete€description€of€all€functionalities€and€theirÏaccessibility;€and€€Ìà  àà ` àà ¸ àà  à(F)€Encryption€components€need€to€be€clearly€identified€to€includeÏthe€name€of€the€manufacturer,€component€model€number,€or€other€identifier.ÌÌà  àà ` àà ¸ à(vi)€For€classification€requests€regarding€source€code:Ìà  àà ` àà ¸ àà  à(A)€If€applicable,€reference€the€executable€product€that€has€alreadyÏreceived€a€technical€review;Ìà  àà ` àà ¸ àà  à(B)€Include€whether€the€source€code€has€been€modified€and,€ifÏmodified,€provide€the€technical€details€on€how€the€source€code€was€modified;Ìà  àà ` àà ¸ àà  à(C)€Include€a€copy€of€the€sections€of€the€source€code€that€containÏthe€encryption€algorithm,€key€management€routines,€and€their€related€calls.Ìñ’ñœñ’ñò òPARTñ’ñ›ñ’ññ’ññ’ñ€770€„€[AMENDED]ó óÐ è+€%( Ðà  à17.€Section€770.2€is€amended€by€adding€new€paragraph€(n)€to€read€as€follows:Ð È-`'* Ðñ’ñœñ’ñðð770.2ñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñItemñ’ñ›ñ’ññ’ññ’ñ€interpretations.Ìñ’ñœñ’ñ*ñ’ñ›ñ’ññ’ññ’ñ€€€€€*€€€€€*€€€€€*€€€€€*Ì(n)€òòInterpretation€14:€Encryption€commodity€and€software€reviewsóó.€Classification€of€encryptionÐ ( À Ðcommodities€or€software€is€required€to€determine€eligibility€for€all€licensing€mechanisms€exceptÏsource€code€(see€ðððð740.13(e)€and€ñ’ñœñ’ñ740.17(a)(5)(i)€of€the€EAR)ñ’ñ›ñ’ññ’ññ’ñ€and€exports€to€subsidiaries€of€U.S.Ïfirms€(see€ðð740.17(a)(1)).€€Note€that€subsequent€bundling,€patches,€upgrades€or€releases,Ïincluding€name€changes,€may€be€exported€or€reexported€under€the€applicable€provisions€of€theÏEAR€without€further€technical€review€as€long€as€the€functional€encryption€capacity€of€theÏoriginally€reviewed€encryption€product€has€not€been€modified€or€enhanced.€€This€does€not€extendÏto€products€controlled€under€a€different€category€on€the€CCL.Ìñ’ñœñ’ñò òPARTñ’ñ›ñ’ññ’ññ’ñ€772€„€[AMENDED]ó óÐ (À Ðà  à18.€Part€772€is€amended€by€removing€the€definitions€for€ñ’ñœñ’ñð ðHealth/medicalñ’ñ›ñ’ññ’ññ’ñ€end„userðð€andÏð ðOn„line€merchantðð€and€adding€definitions€for€ð ðasymmetric€algorithmðð,€ð ðencryptionÏcomponentðð,€ñ’ñœñ’ñð ðgovernmentñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñend„userðð,ñ’ñ›ñ’ññ’ññ’ñ€ð ðopen€cryptographic€interfaceðð,€and€ð ðsymmetric€algorithmððÏin€alphabetical€order,€to€read€as€follows:€Ìñ’ñœñ’ñPARTñ’ñ›ñ’ññ’ññ’ñ€772€„€DEFINITIONS€OF€TERMSÌà@ååìà*€€€€€*€€€€€€*€€€€€*€€€€€*ˆÌà  à"òòAsymmetric€algorithmóó".€(Cat€5,€part€II)€€A€cryptographic€algorithm€using€different,Ð H&à" Ðmathematically„related€keys€for€encryption€and€decryption.€€A€common€use€of€"asymmetricÏalgorithms"€is€key€management.ÌÓ  Óà@@åå#ìà*€€€€€*€€€€€€*€€€€€*€€€€€*ÌÐ È-`'* ÐÓ&FÓà  àð ðòòEncryption€Componentóóðð.€Any€encryption€commodity€or€software€(except€source€code),Ð h Ðincluding€encryption€chips,€integrated€circuits,€application€specific€encryption€toolkits,€orÏexecutable€or€linkable€modules€that€alone€are€incapable€of€performing€complete€cryptographicÏfunctions,€and€is€designed€or€intended€for€use€in€or€the€production€of€another€encryption€item.ò òÐ    ÐÓ  Óó óà@@åå#ìà*€€€€€*€€€€€€*€€€€€*€€€€€*Ð è € ÐÌÓ5HÓà  àòòGovernment€End„User€(as€applied€to€encryption€items)óó.€A€government€end„user€is€anyÐ ¨@  Ðforeign€central,€regional€or€local€government€department,€agency,€or€other€entity€performingÏgovernmental€functions;€including€governmental€research€institutions,€€governmentalÏcorporations€or€their€separate€business€units€(as€defined€in€part€772€of€the€EAR)€which€areÏengaged€in€the€manufacture€or€distribution€of€items€or€services€controlled€on€the€WassenaarÏMunitions€List,€and€international€governmental€organizations.€€This€term€does€not€include:Ïutilities€(including€telecommunications€companies€and€Internet€service€providers);€banks€andÏfinancial€institutions;€transportation;€broadcast€or€entertainment;€educational€organizations;€civilÏhealth€and€medical€organizations;€retail€or€wholesale€firms;€and€manufacturing€or€industrialÏentities€not€engaged€in€the€manufacture€or€distribution€of€items€or€services€controlled€on€theÏWassenaar€Munitions€List.€€ÌÓ  Óà@@åå#ìà*€€€€€*€€€€€€*€€€€€*€€€€€*ÌÓmLÓà  àð ðòòOpen€Cryptographic€Interfaceóóðð.€A€mechanism€which€is€designed€to€allow€a€customer€orÐ ((À!$ Ðother€party€to€insert€cryptographic€functionality€without€the€intervention,€help€or€assistance€of€theÏmanufacturer€or€its€agents,€e.g.,€manufacturerððs€signing€of€cryptographic€code€or€proprietaryÏinterfaces.€€If€the€cryptographic€interface€implements€a€fixed€set€of€cryptographic€algorithms,€keyÐ È-`'* Ðlengths€or€key€exchange€management€systems,€that€cannot€be€changed,€it€will€not€be€consideredÏan€ð ðopenðð€cryptographic€interface.€€All€general€application€programming€interfaces€(e.g.,€thoseÏthat€accept€either€a€cryptographic€or€non„cryptographic€interface€but€do€not€themselves€maintainÏany€cryptographic€functionality)€will€not€be€considered€ð ðopenðð€cryptographic€interfaces.€Ìà@ååìà*€€€€€*€€€€€*€€€€€*€€€€€*€ˆÌà  à"òòSymmetric€algorithmóó".€(Cat€5,€part€II)€€A€cryptographic€algorithm€using€an€identical€keyÐ È`  Ðfor€both€encryption€and€decryption.€€A€common€use€of€"symmetric€algorithms"€is€confidentialityÏof€data.Ìà@ååìà*€€€€€*€€€€€*€€€€€*€€€€€*€ˆÌñ’ñœñ’ñò òPARTñ’ñ›ñ’ññ’ññ’ñ€774€„€[AMENDED]ó óÐ Hà Ðà  à19.€In€Supplement€No.€1€to€part€774,€Category€5€„€Telecommunications€and€InformationÏSecurity€is€amended:Ìà  àà ` àa.€€By€ñ’ñœñ’ñremoving€the€ñŒñNñŒñññnññote€immediatelyñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñfollowing€theñ’ñ›ñ’ññ’ññ’ñ€heading€for€"InformationÏñ’ñœñ’ñSecurity"€and€adding€three€new€ñŽñNñŽñññnññotes€in€its€place€to€read€as€set€forth€below;ñ’ñ›ñ’ññ’ññ’ñÌà  àà ` àb.€By€revising€ñ’ñœñ’ñthe€heading€and€ð ðList€of€Items€Controlledðð€for€ECCNsñ’ñ›ñ’ñ€5A002;€and€Ìà  àà ` àc.€By€revising€the€ñ’ñœñ’ñð ðLicenseñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñRequirementsððñ’ñ›ñ’ññ’ññ’ñ€section€of€ECCN€5D002€to€read€asÏfollows:€Ìñ’ñœñ’ñCATEGORYñ’ñ›ñ’ññ’ññ’ñ€5€-€TELECOMMUNICATIONS€AND€"INFORMATION€SECURITY"€Ìò ò€ó óà@ååìà*€€€€€*€€€€€*€€€€€*€€€€€*€ˆÐ ((À!$ Ðñ’ñœñ’ñòòPartñ’ñ›ñ’ññ’ññ’ñ€II€-€"Information€Security"óóÐ * #& Ðà  àNote€1:€€The€control€status€of€"information€security"€equipment,€"software",€systems,Ïapplication€specific€"electronic€assemblies",€modules,€integrated€circuits,€components,€orÐ È-`'* Ðfunctions€is€determined€in€Category€5,€part€2€even€if€they€are€components€or€"electronicÏassemblies"€of€other€equipment.Ìà  àNote€2:€€Category€5€„€part€2€encryption€products,€when€accompanying€their€user€for€theÏuser's€personal€use,€are€eligible€for€License€Exceptions€TMP€or€BAG.Ìà  àNote€3:€€òòCryptography€Note:óó€€ECCNs€5A002€and€5D002€do€not€control€items€that€meetÐ è € Ðall€of€the€following:Ìà  àa.€€Generally€available€to€the€public€by€being€sold,€without€restriction,€from€stock€at€retailÏselling€points€by€means€of€any€of€the€following:Ìà  àà ` à1.€€Over„the„counter€transactions;Ìà  àà ` à2.€€Mail€order€transactions;Ìà  àà ` à3.€€Electronic€transactions;€orÌà  àà ` à4.€€Telephone€call€transactions;ÌÌà  àb.€€The€cryptographic€functionality€cannot€be€easily€changed€by€the€user;Ìà  àc.€€Designed€for€installation€by€the€user€without€further€substantial€support€by€theÏsupplier;Ìà  àd.€€Does€not€contain€a€"symmetric€algorithm"€employing€a€key€length€exceeding€64„bits;ÏòòandóóÐ H&à" Ðà  àe.€€When€necessary,€details€of€the€items€are€accessible€and€will€be€provided,€upon€request,Ïto€the€appropriate€authority€in€the€exporter's€country€in€order€to€ascertain€compliance€withÏconditions€described€in€paragraphs€(a)€through€(d)€of€this€note.€€See€ðð742.15(b)(1)€of€the€EAR.€Ìà@ååìà*€€€€€*€€€€€*€€€€€*€€€€€*€ˆÐ È-`'* Ðñ’ñœñ’ñ‡5A002ñ’ñ›ñ’ñ€€Systems,€equipment,€application€specific€"electronic€assemblies",€modules€and€integratedÏcircuits€for€"information€security",€and€other€specially€designed€components€therefor.ÌÌà@þþìà*€€€€€*€€€€€*€€€€€*€€€€€*ˆÌList€of€Items€ControlledÌÌà  àòòUnit:óó€$€valueÐ ¨@  Ðà0  àòòRelated€Controls:óó€€See€also€5A992.€€This€entry€does€not€control:€a.)€€"Personalized€smartÐ ˆ  Ðcards€"where€the€cryptographic€capability€is€restricted€for€use€in€equipment€or€systemsÏexcluded€from€control€paragraphs€(b)€through€(f)€of€this€note.€€Note€that€if€a€"personalizedÏsmart€card"€has€multiple€functions,€the€control€status€of€each€function€is€assessedÏindividually;€b.)€Receiving€equipment€for€radio€broadcast,€pay€television€or€similarÏrestricted€audience€television€of€the€consumer€type,€without€digital€encryption€except€thatÏexclusively€used€for€sending€the€billing€or€program„related€information€back€to€theÏbroadcast€providers€c.)€€Portable€or€mobile€radiotelephones€for€civil€use€(e.g.,€for€use€withÏcommercial€civil€cellular€radio€communications€systems)€that€are€not€capable€of€end„to„¼end€encryption;€d.)€Equipment€where€the€cryptographic€capability€is€not€user„accessibleÏand€which€is€specially€designed€and€limited€to€allow€any€of€the€following:€1.)€ExecutionÏof€copy„protected€"software";€2.)€€Access€to€any€of€the€following:€€a.)€€Copy„protectedÏread„only€media;€òòoróó€b.)€€Information€stored€in€encrypted€form€on€media€(e.g.,€inÐ * #& Ðconnection€with€the€protection€of€intellectual€property€rights)€where€the€media€is€offeredÏfor€sale€in€identical€sets€to€the€public;€òòoróó€3.)€€One„time€encryption€of€copyright€protectedÐ È-`'* Ðaudio/video€data;€e.)€Cryptographic€equipment€specially€designed€and€limited€for€bankingÏuse€or€money€transactions;€f.)€€Cordless€telephone€equipment€not€capable€of€end„to„endÏencryption€where€the€maximum€effective€range€of€unboosted€cordless€operation€(e.g.,€aÏsingle,€unrelayed€hop€between€terminal€and€home€basestation)€is€less€than€400€metersÏaccording€to€the€manufacturer's€specifications.Ð (#(# Ðà0  àRelated€Definitions:€1.)€€The€term€"money€transactions"€in€paragraph€e.)€of€RelatedÏControls€includes€the€collection€and€settlement€of€fares€or€credit€functions.€€2.)€€For€theÏcontrol€of€global€navigation€satellite€systems€receiving€equipment€containing€orÏemploying€decryption€(e.g.,€GPS€or€GLONASS)€see€7A005.Ð (#(# Ðà  àòòItems:óó€Ð Hà Ðà  àòòTechnical€Noteóó:€€Parity€bits€are€not€included€in€the€key€length.Ð (À Ðñ’ñœñ’ña.ñ’ñ›ñ’ññ’ññ’ñ€€Systems,€equipment,€application€specific€"electronic€assemblies",€modules€and€integratedÏcircuits€for€"information€security",€and€other€specially€designed€components€therefor:Ìà  àa.1.€€Designed€or€modified€to€use€"cryptography"€employing€digital€techniquesÏperforming€any€cryptographic€function€other€than€authentication€or€digital€signature€having€anyÏof€the€following:Ìà  àòòTechnical€Notes:óóÐ h$  Ðà  à1.€€Authentication€and€digital€signature€functions€include€their€associated€keyÏmanagement€function.Ìà  à2.€€Authentication€includes€all€aspects€of€access€control€where€there€is€no€encryption€ofÏfiles€or€text€except€as€directly€related€to€the€protection€of€passwords,€Personal€IdentificationÏNumbers€(PINs)€or€similar€data€to€prevent€unauthorized€access.Ð È-`'* Ðà  à3.€€"Cryptography"€does€not€include€"fixedðð€data€compression€or€coding€techniques.Ìà  àòòNote:óó€€5A002.a.1€includes€equipment€designed€or€modified€to€use€"cryptography"Ð Hà Ðemploying€analogue€principles€when€implemented€with€digital€techniques.Ìñ’ñœñ’ññ‘ñÌñ‘ññ’ñ›ñ’ññ’ññ’ñà  àà ` àa.1.a.€€A€"symmetric€algorithm"€employing€a€key€length€in€excess€of€56„bits;€òòoróóÐ    Ðà  àà ` àa.1.b.€€An€"asymmetric€algorithm"€where€the€security€of€the€algorithm€is€based€onÏany€of€the€following:Ìà  àà ` àà ¸ àa.1.b.1.€€Factorization€of€integers€in€excess€of€512€bits€(e.g.,€RSA);Ìà  àà ` àà ¸ àa.1.b.2.€€Computation€of€discrete€logarithms€in€a€multiplicative€group€of€aÏfinite€field€of€size€greater€than€512€bits€(e.g.,€Diffie„Hellman€over€Z/pZ);€òòoróóÐ h Ðà  àà ` àà ¸ àa.1.b.3.€€Discrete€logarithms€in€a€group€other€than€mentioned€inÏ5A002.a.1.b.2€in€excess€of€112€bits€(e.g.,€Diffie„Hellman€over€an€elliptic€curve);Ìà  àa.2.€€Designed€or€modified€to€perform€crypto€analytic€functions;Ìà  àa.3.€[Reserved]Ìà  àa.4.€€Specially€designed€or€modified€to€reduce€the€compromising€emanations€ofÏinformation-bearing€signals€beyond€what€is€necessary€for€the€health,€safety€or€electromagneticÏinterference€standards;Ìà  àa.5.€€Designed€or€modified€to€use€cryptographic€techniques€to€generate€the€spreading€codeÏfor€"spread€spectrum"€or€the€hopping€code€for€"frequency€agility"€systems;Ìà  àa.6.€€Designed€or€modified€to€provide€certified€or€certifiable€"multilevel€security"€or€userÏisolation€at€a€level€exceeding€Class€B2€of€the€Trusted€Computer€System€Evaluation€CriteriaÏ(TCSEC)€or€equivalent;Ìà  àa.7.€€Communications€cable€systems€designed€or€modified€using€mechanical,€electrical€orÐ È-`'* Ðelectronic€means€to€detect€surreptitious€intrusion.Ìà@ååìà*€€€€€*€€€€€*€€€€€*€€€€€*€ˆÌñ’ñœñ’ñ5D002ñ’ñ›ñ’ñ€Information€Security€„€"Software".Ìñ’ñœñ’ñLicenseñ’ñ›ñ’ññ’ññ’ñ€RequirementsÌà  àòòReason€for€Controlóó:€€€NS,€AT,€EIÐ è € Ðñ’ñœñ’ñòòControl(s)óóñ’ñ›ñ’ññ’ññ’ñà ` àà ¸ àà  àà h àà À àòòà  àóóòòCountry€ChartóóÐ È`  Ðñ’ñœñ’ñNSñ’ñ›ñ’ññ’ññ’ñ€applies€to€entire€entry€à  àà h àNS€Column€1Ð ¨@  Ðñ’ñœñ’ñATñ’ñ›ñ’ññ’ññ’ñ€applies€to€entire€entry€à  àà h àAT€Column€1Ð ˆ  Ðñ’ñœñ’ñEIñ’ñ›ñ’ñ€applies€to€encryption€items€transferred€from€the€U.S.€Munitions€List€to€the€Commerce€ControlÏList€consistent€with€E.O.€13026€of€November€15,€1996€(61€FR€58767)€and€pursuant€to€theÏPresidential€Memorandum€of€that€date.€€Refer€to€ðð742.15€of€the€EAR.Ìà0  àà0` (#(#àNote:€€Encryption€software€is€controlled€because€of€its€functional€capacity,€andÏnot€because€of€any€informational€value€of€such€software;€such€software€is€notÏaccorded€the€same€treatment€under€the€EAR€as€other€"software";€and€for€exportÏlicensing€purposes,€encryption€software€is€treated€under€the€EAR€in€the€sameÏmanner€as€a€commodity€included€in€ECCN€5A002.ò òЈ" ` (#` (# Ðó óà0  àà0` (#(#àNote:€Encryption€software€controlled€for€ð ðEIðð€reasons€under€this€entry€remainsÐ h$  Ðsubject€to€the€EAR€even€when€made€publicly€available€in€accordance€with€partÏ734€of€the€EAR.€€See€ðððð740.13(e)€and€740.17(5)(i)€of€the€EAR€for€information€onÏreleasing€certain€source€code€which€may€be€considered€publicly€available€fromÏð ðEIðð€controls.Ð ` (#` (# Ðà0  àà0` (#(#àNote:€After€a€technical€review,€56„bit€items,€key€management€products€notÐ È-`'* Ðexceeding€512€bits€and€mass€market€encryption€commodities€and€software€ñ’ñœñ’ñÏeligible€for€the€Cryptography€Note€(see€ðð742.15(b)(1)€of€the€EAR)€mayñ’ñ›ñ’ññ’ññ’ñ€beÏreleased€from€ð ðEIðð€and€ð ðNSðð€ñ’ñœñ’ñcontrols.ñ’ñ›ñ’ññ’ññ’ñ€€ñ’ñœñ’ñÐ ` (#` (# Ðññ›ññLicense€Exceptions€€*€€€€€*€€€€€*€€ñ’ñ›ñ’ññ’ññ’ñÌñ’ñœñ’ñà@þþìà*ñ’ñ›ñ’ññ’ññ’ñ€€€€€*€€€€€*€€€€€*€€€€€*ˆÌà  à20.€Supplement€No.€2€to€part€774€(General€Technology€and€Software€Notes)€is€amendedÏby€revising€the€ñ’ñœñ’ññŠñNñŠññ‹ññ†ñnñ†ññ‹ñoteñ’ñ›ñ’ññ’ññ’ñ€ñ’ñœñ’ñat€the€end€of€the€Supplement€ñ‰ñin€paragraph›€2›€(General›€Software›€Note)›€ñ‰ñtoñ’ñ›ñ’ññ’ññ’ñ€read€as€follows:Ìñ’ñœñ’ñSUPPLEMENTñ’ñ›ñ’ññ’ññ’ñ€NO.€2€TO€PART€774€„€GENERAL€TECHNOLOGY€AND€SOFTWAREÏNOTESÌà@þþìà*€€€€€*€€€€€*€€€€€*€€€€€*ˆÌñ’ñœñ’ñññ2.›€›€*›€›€›€*›€›€›€*›Ìñññ’ñ›ñ’ññ’ññ’ñà  àòòNote:óó€€The€General€Software€Note€does€not€apply€to€"software"€controlled€by€Category€5Ð (À Є€part€2€("Information€Security").€€For€"software"€controlled€by€Category€5,€part€2,€seeÏSupplement€No.€1€to€part€774,€Category€5,€part€2,€Note€3€„€Cryptography€Note.€Ìñ’ñœñ’ñÌñ’ñ›ñ’ññ’ññ’ñà@ååìà*€€€€€*€€€€€€*€€€€€*€€€€€*ˆÌñ’ñœñ’ñDATED:ñ’ñ›ñ’ññ’ññ’ñÌÌÌR.€Roger€MajakÌAssistant€SecretaryÌfor€Export€Administration