WPC8 i7v- JY̠&oӬ&v)M cTG"Zt".O;G]GW,l@6;j`*]>U"+;U־o7F7c)h };'^xY^ ?YֈG.d{C[:/.zbw9'n%"vdvpSxW9S(2kDʿmh}!:4bVQG+5tgUNID34uzNάtH?y"뮙9}<;l#UN % 0: N7 UN9 ^ w 4   m UN &! G U^>O 2 0N 1 0U 0 0 0 0 0i 0@ 0 0 0C 0 0 0 0` 0( 0 0 0n 0@( 0h 06 0 0 0 0P 0 02 0~ B2!UNt!2!&!2" 1uL" 72"&"0#&I#&o# 0c# 00#U@($ 0<h$ 0$ 0>b% 0v% 0`& 0`v& 0`& 0`6' 0`' 08' 0.( 02) 02) 0:.* 0Yh* 0_* 0  + 0j*, 0- B*/ D/B/ D+q/ 0/ D/ 1 0O1 062 BS2 ASp22 0V3 0V3 0D54 0y4 D55 0:5 0^5 0<N6 1e6U66U*%7O7(8&=8(c8&80(9 Z6Times New Roman RegularX($USUS.,!(ON  Z 6Times New Roman Regular5~1s o1E0r|Backup3|x/U(hH  Z 6Times New Roman Regularmailto:enc@nsa.gov \  `&Times New Romanmailto:crypt@bis.doc.gov(O$(CEMU]emu}AutoList1(A)(A)(A)(A)(A)(A)(A)(A)*+ (_2623  ..*D+J (_25   ," <DL,23  ..  2( 4 <DL2  *A+J (_24   ) <DL)23  ..  2( 4 <DL2  *>+J (_23  ` &<<DL&23  ..  2( 4 <DL2  *;+J (_22   #DL#23  ..  2( 4 <DL2  *8+J (_21    DL 23  ..  2( 4 <DL2  *5+J (_20  h DDL23  ..  2( 4 <DL2  *2+J (_19   L23  ..  2( 4 <DL2  */+J (_18    L23  ..  2( 4 <DL2  * (_1723  Ԁ*DJ (_16   ," <DL,23  Ԁ  2( 4 <DL2  *AJ (_15   ) <DL)23  Ԁ  2( 4 <DL2  *>J (_14  ` &<<DL&23  Ԁ  2( 4 <DL2  *;J (_13   #DL#23  Ԁ  2( 4 <DL2  *8J (_12    DL 23  Ԁ  2( 4 <DL2  *5J (_11  h DDL23  Ԁ  2( 4 <DL2  *2J (_10   L23  Ԁ  2( 4 <DL2  (/J &_9    L23  Ԁ  2( 4 <DL2  ( &_823  (DJ &_7   ," <DL,23   2( 4 <DL2  (AJ &_6   ) <DL)23   2( 4 <DL2  (>J &_5  ` &<<DL&23   2( 4 <DL2  (;J &_4   #DL#23   2( 4 <DL2  (8J &_3    DL 23   2( 4 <DL2  (5J &_2  h DDL23   2( 4 <DL2  (2J &_1   L23   2( 4 <DL2  &/J $_    L23   2( 4 <DL2  mailto:crypt@bis.doc.govV& 8Document[8]Document Style0..8` ..` mailto:david_rostker@omb.eop.gov(hH  Z6Times New Roman Regularmailto:crypt@bis.doc.govmailto:enc@nsa.govmailto:crypt@bis.doc.gov3#37=CIQYag1.a.i.(1)(a)(i)1)a)6i)mailto:enc@nsa.govmailto:rpd@bis.doc.gov,mailto:enc@nsa.govmailto:enc@nsa.gov(;3$2#  0  .3  0  0.Normal'n2 Z(Times New Roman <:Definition T<AA:Definition L , 5+ ` hp x 5  5+ ` hp x 586Definition(''&H1      (&H2  (&H3  (&H4 XXX (&H5  (&H6  20Address8MM6Blockquote , , 5+ ` hp x 5   5+ ` hp x 5,*CITE,dl*CODEKe<6X9`(Courier NewKS\  `&Times New RomanS42Emphasis64Hyperlink    <:FollowedHype    4go2Keyboard Ke<6X9`(Courier NewKS\  `&Times New RomanS <:Preformatted/%  ,Kk %#/Ke<6X9`(Courier NewKS\  `&Times New RomanS/%  ,Kk %#/<:zBottom of 7S(X7  ?f%2A`Arial?  S\  `&Times New RomanS7T(X7&  d dR)1dxd'dxd<:zTop of For7V(X7  ?f%2A`Arial?  S\  `&Times New RomanS7T(X7R)2dxd0KS.SampleKe<6X9`(Courier NewKS\  `&Times New RomanS0.Strong  d[\]^`E<<CLevel 1Level 2Level 3Level 4Level 5(.3$ !USUS.,  (.3$ !USUS.,  ($$   1  8dl6TypewriterKe<6X9`(Courier NewKS\  `&Times New RomanSYYYY)!dxdx42Variable: 8HTML MarkupB      2 0CommentB   !"#$ 35;AGMSY_11.1.1.1.1.1.1.1.<6X9`(Courier New%2A`ArialLevel 1Level 2Level 3Level 4Level 5mailto:enc@ncsn.milmailto:enc@nsa.govmailto:enc@nscs.milmailto:enc@nsa.gov !USUS.,  _!f @ 8zXdd8(#(#K(#f  g f  g f  g f  g f  g f  g Ԉ3(#BillingCode:XzXXXԀ351033P#XzXXXzC#Ԉ  BureauofIndustryandSecurity   15CFRparts732,734,740,742,744,and772   p    h  [DocketNo.041022290429001] P RIN0694AD19 8    `     h EncryptionExportandReexportControlsRevisions  p AGENCY:BureauofIndustryandSecurity,Commerce  X ACTION:Finalrule. #@  SUMMARY:Thisrulerevises:thef  g ԀcriteriafordeterminingifaforeignmadeitemincorporatingU.S. '(#$ originencryptionissubjecttotheExportAdministrationRegulations;f  thef  g Ԁf  g notificationrequirementsfor )%& f  g f  g betatestencryptionsoftwareandf  g Ԁcertain publiclyavailableencryptionsoftwaref  g f  g ;f  g Ԁandg f  g Ԁthef  g Ԁf  g f  g reviewf  g Ԁand +'( f  g f  g reportingf  g ԀrequirementsforexportsandreexportsofcertainencryptionitemsunderLicenseException  ENCthatareneitherf  g f  g publiclyf  g Ԁavailablef  g f  g Ԁnoreligiblef  g Ԁfor massmarkettreatment.Italsomakes  technicalchanges.  DATES:ThisruleiseffectiveDecember9,2004   ADDRESSES:Sendcommentsconcerningthisruleviaemailto49 O  5  rpd2@bis.doc.gov6O  7 |,faxto202482 h  3355ortoRegulatoryPolicyDivision,BureauofIndustryandSecurity,Room2705,U.S,Department \  ofCommerce,Washington,D.C.20230.Refertoregulatoryidentificationnumber0694AD19inall P comments. D FORFURTHERINFORMATIONCONTACT:NormanLaCroix,Directorf  g ,f  g ԀInformationTechnology ,| ControlsDivision,OfficeofNationalSecurityandTechnologyTransferControls,2024824439.  p SUPPLEMENTARYINFORMATION:Thisruleremovestherequirementtomakeaseparate  X requestfordeminimiseligibilitywhensubmittingareviewrequestforsomeencryptioncommoditiesand !L softwareunderLicenseExceptionENC.ForeignmadeitemsincorporatingU.S.originencryption #@  itemsthathavemetspecified notificationorreviewrequirementsundermassmarket,LicenseException %4!" TSUorLicenseExceptionENCprocedureswillbetreatedlikeforeignmadeitemsthatincorporate '(#$ otherU.S.originitems,indeterminingdeminimiseligibility.Thisruleremovescertainreporting )%& requirementsinLicenseExceptionTMPregardingbetatestencryptionsoftware.Thisrulereducesthe +'( notificationrequirementsforexportsandreexportsofcertain publiclyavailablef  g f  g Ԁf  g f  g f  g encryptionsoftware  thathasbeenpostedtotheInternetf  g pursuanttoLicenseExceptionTSUf  g byremovingtherequirementto  notifytheU.S.GovernmentofupdatesormodificationsiftheInternetlocationhasnotchanged.This  rulesimplifiesLicenseExceptionENCf  g Ԁreviewrequirementsforexportsandreexportsoff  g f  g eligiblef  g    encryptionitemsf  g f  g ,byimplementingaf  f  g g uniformf  g f  g 30dayf  f  g f  g g periodforf  g f  g Ԁmostencryptionreviewsandby   clarifyingthecriteriabywhichlicensingrequirementstocertain governmentend-usersaredetermined. t  Inconnectionwiththisf  g f  g Ԁ30dayf  f  g f  g g periodassociatedwithf  g f  g f  g thef  f  g g Ԁinitialf  g f  g ԀU.S.Governmentf  f  g g technicalf  g f  g reviewf  f  g g Ԁofan h  encryptionitemf  g f  g ,thisruleauthorizesBISto,atanytime,requireadditionaltechnicalinformationabout \  anencryptionitemsubmittedforreviewand,iftheinformationisnotfurnished,tosuspendorrevoke P authorizationtouseLicenseExceptionENCwithrespecttotheitemforwhichtheinformationis D sought.Thisrulealsoexpandsthelistofcountriestowhichcertainencryptionitemsmaybesent 8 immediately,onceareviewrequestissubmittedtotheU.S.Government.Thelist(SupplementNo.3 ,| tof  g f  g pf  g art740)nowcoversallcurrentmembersoftheEuropeanUnion(EU),toincludethosecountries  p thatjoinedtheEUonMay1,2004.Thisrulef  g f  g updatesf  g Ԁandclarifiesseveralf  g f  g encryptionf  g Ԁreview d requirementsf  g f  g inf  g LicenseExceptionENCandclarifiesthedefinitionoftheterm holdwithoutactionin  X theExportAdministrationRegulations.Thisrulealsomakessometechnicalchanges,andrevisesthee !L mailaddressoftheENCEncryptionRequestCoordinatorfrom4h zO  5  enc@ncsc.mil6;OO  7 }Ԁto4i O  5  enc@nsa.gov6O  7 2Ԁto #@  matchthecurrentemailaddressofthatorganization. %4!" Althoughthisruleisissuedinfinalformandthereisnoformalcommentperiod,commentsonthisrule )%& arewelcomedonanongoingbasis.f  g  +'( ЇDeterminingwhenaforeignmadeitemissubjecttotheEAR    Section734.4oftheEARdescribessituationsunderwhichforeignmadeitemsarenotsubject  totheExportAdministrationRegulationsbecausetheU.S.originitemsthattheyincorporateareless   thanadefined deminimispercentageoftheircontent.f  g f  g ԀThisruleremovestherequirementforU.S.   firmsf  g Ԁtorequesteligibilityfordeminimistreatmentwhensubmittingtheirencryptioncommodityor t  softwareforreviewtoobtainauthorizationforexportandreexportunderLicenseExceptionENC h  (740.17oftheEAR).f  g f  g Asaresultf  g ,foreignmadeitemscontainingf  g mostf  g U.S.originencryption \  commoditiesorsoftwarethathavemetthenotification,reviewordeterminationrequirementsspecified P inrevised734.4f  g (b)f  g f  g f  g arenowf  g Ԁtreated,forpurposesofdeminimiscalculations,inthesamewayas D f  g foreignmadeitemsthatincorporateotherU.S.originf  g f  g dualusef  g Ԁitemsf  g .However,thereisnodeminimis 8 eligibilityforencryptiontechnologycontrolledunderExportControlClassificationNumber(ECCN) ,| 5E002,orforforeignmadeitemsgoingtof  g adestinationinf  g CountryGroupE:1f  g f  g whentheforeignitem  p containsf  g ԀU.S.originrestrictedencryptioncontentf  g describedin740.17(b)(2)oftheEARf  g Ԁ(e.g.network d infrastructurecommoditiesandsoftwarecontrolledunderECCNs5A002and5D002,cryptanalytic  X items,andECCN5D002encryptionsourcecodethatisnot publiclyavailableasthattermisusedin !L LicenseExceptionTSU,740.13(e)(1)oftheEAR).Thisrulealsomakesconformingchangesto #@  732.2(d)toreflectthesenewdeminimisprocedures. %4!"  +'( f  g ExportsofbetatestencryptionsoftwareunderlicenseexceptionTMPf  g     Thisruleremovestherequirementstoreportthenamesandaddressesoftestingconsigneesby  removing740.9(c)(8)(ii).Itrestructures,butmakesnoothersubstantivechangesto740.9(c)(8).It   retainsthenotificationrequirementsofthatparagraphandchangesanemailaddress.   Exportsofcertain publiclyavailableencryptionsoftwareunderlicenseexceptionTSU h    For publiclyavailableencryptionsoftwarethathasbeenpostedtotheInternetafter P notificationtoBISandtheENCEncryptionRequestCoordinatorunder740.13(e),thisruleremoves D therequirementtoprovidenoticeofupdatesormodificationsmadetotheencryptionsoftwareatthe 8 previouslynotifiedlocation.Thisrulemakesnoothersubstantivechangestothissectionf  g ,but ,| substantiallyreorganizesit.  p   f  g f  g LicenseExceptionENCrf  g eviewrequirementsforcertainencryptionitemsthatareneitherpublicly  X availablenordeterminedbyBIStobeeligiblefor massmarkettreatment !L   ThisruleclarifiesthescopeofLicenseExceptionENCbyreplacing,throughout740.17,the %4!" phrase(anditsvariants)f  g encryptionitemscontrolledunderECCN5A002,5D002or5E002f  g ,f  g Ԁand '(#$ informationsecurity f  g test,inspectionf  g ,f  g ԀandproductionequipmentcontrolledunderECCN5B002f  g f  g f  g f  g f  g Ԁf  g with )%& alistofthef  g f  g specificECCNs(includingthesubparagraphnumber,whereneededforclarity)that +'( identifywhichitemssubjecttotheEARf  g Ԁareeligibleforf  g Ԁthislicenseexception.Itconsolidatesthe  provisionsandrestrictionsthatapplytotheentirelicenseexception,inarevisedintroductoryparagraph  andanewparagraph(f),respectively.Itf  g Ԁremovesrepetitivereferencestosuchprovisionsand  restrictionsfromf  g f  g variousf  g Ԁparagraphsf  g .Italsoreplacesthe Grandfatheringparagraphf  g (former   740.17(d)(2))f  g withspecificinformationinf  g paragraphsf  g Ԁ(a),(b)(2),and(b)(3)f  g Ԁdescribingtheextentto   whichpriorU.S.Governmentreviewsmaybeusedtosatisfycurrentf  g ԀLicenseExceptionf  g ԀENC t  encryptionreviewrequirements. h    ThisruleretainsthebasicstructureofLicenseExceptionENC,byf  g f  g addressingf  g Ԁexportsand P reexportstocountriesf  g listedf  g inSupplementNo.3tof  g f  g pf  g art74f  g f  g 0f  g Ԁinparagraph(a)andexportstoother D countriesinparagraph(b).Paragraph(b)continuestobefurthersubdivided,providingseparate 8 provisionsforexportsandreexportstof  g :f  g ԀsubsidiariesofU.S.f  g f  g companiesf  g Ԁ(paragraph(b)(1));non ,|  governmentendusersforcertainrestricteditems(asdescribedinparagraph(b)(2));andboth  p  governmentendusersandnon governmentendusersforallotheritems(paragraph(b)(3)). d However,importantsubstantivef  g f  g changesf  g Ԁandf  g f  g clarificationsf  g Ԁaremadetoalloftheseparagraphs.f  g ԀThose  X changesandclarificationsarediscussedbelow.f  g  !L f  g   Exports,reexportsandf  g f  g technicalassistancef  g ԀtocountrieslistedinSupplementNo.3toPart740 %4!" (740.17(a)) '(#$   XzXXXzԀf  g f  g #XzXXXz;# )%&   Thisrulerevisesf  g f  g Ԁ740.17(a)sothatthesectionnotonlycontinuestoauthorizetheexportand +'( reexportofencryptionitemsunderspecifiedcircumstances,butalsoallowsthef  g Ԁprovisionoftechnical  assistancef  g f  g relatedtof  g Ԁencryptionitemsf  g f  g (asdescribedin744.9oftheEAR),whenthetechnical  assistanceisprovidedtoenduserslocatedorheadquarteredinCanadaorincountriesf  g Ԁlistedin  SupplementNo.3topart740f  f  g .Thisf  g Ԁrulealsoremovesthef  g specificf  g referencef  g Ԁinthisparagraphf  g Ԁtothe   prohibitiononexportsf  g f  g orreexportsofencryptionsourcecodeandtechnologytonationalsofcountries   listedf  g ԀinCountryGroupE:1f  g f  g inSupplementNo.1topart740oftheEAR,assuchgeneralrestrictions t  ontheuseoff  g ԀLicenseExceptionENCf  g f  g havebeenconsolidatedintoanewf  g Ԁparagraphf  g Ԁ(f)f  g .Italsodivides h  paragraph(a)intothreeparagraphsdesignated740.17f  g f  g Ԁf  g (a)(1),740.17(a)(2),and740.17(a)(3). \    Section740.17(a)(1)eliminatestherequirementthattheU.S.Governmentreviewf  g the D f  g encryptionitemsf  g andrelatedtechnicalassistancepriortotheirbeingf  g f  g providedf  g Ԁf  g forf  g internalcompanyuse 8 inthedevelopmentofnewproductsbyprivatesectorendusersthatareheadquarteredf  g f  g inf  g f  g Canadaorinf  g  ,| countriesf  g ԀlistedinSupplementNo.3topart740f  g f  g .f  g f  g Howeverf  g ,f  g Ԁitretainstherequirementthatsuchnew  p productencryptionitemsdevelopedbythoseendusersbereviewedbytheU.S.Governmentbefore d f  g f  g thefinishedproductsaref  g Ԁtransferredtoothers.f  g f  g ԀItalsodefinesf  g f  g privatef  g Ԁsectorf  g f  g enduserf  g Ԁforthe  X purposesofthisparagraph. !L   Section740.17(a)(2)statesthatcertainitemsreviewedandauthorizedforexportandreexport %4!" priortoOctober19,2000areauthorizedforcontinuedexportandreexportunderXzXXXzrevised740.17(a)#XzXXXzMI#, '(#$ withoutadditionalU.S.Governmentreview. )%&  +'( Ї Xf  g Section740.17(a)(3)f  g f  g f  g Ԁretainstheexistingf  g ԀLicenseExceptionENCf  g Ԁprovisionsrequiring  submissionoff  g ԀanencryptionreviewrequesttoBISandtheENCEncryptionRequestCoordinatorf  g f  g   beforeexportorreexportof:f  g f  g f  g f  g f  g finishedencryptionproductstoenduserslocatedincountrieslistedin  SupplementNo.3topart740;finishedproductsf  g toforeignsubsidiariesandofficesofendf  g f  g Ԅf  g users   headquarteredinCanadaorinf  g countrieslistedinf  g SupplementNo.3tof  g f  g part740;andotherencryption   items(includingtechnologyandrelatedtechnicalassistance)toenduserslocatedin,butnot t  headquarteredin,countrieslistedinSupplementNo.3topart740. h   \  f  g  X  Exportandreexportstoothercountriesf  g Ԁ(740.17(b))f  g f  g  P   Thisrulemakesnosubstantivechangestoparagraph(b)(1),whichdealswithexportsand 8 reexportstosubsidiariesofU.S.f  g f  g companiesf  g ,butsubstantiallyreorganizesit.f  g f  g Aswithparagraph(a),tf  g he ,| rulealsoremovesthef  g specificf  g referencef  g Ԁinthisparagraphf  g Ԁtotheprohibitiononexportsf  g f  g orreexportsof  p encryptionsourcecodeandtechnologytonationalsofcountrieslistedf  g ԀinCountryGroupE:1f  g f  g in d SupplementNo.1topart740oftheEAR,assuchgeneralrestrictionsontheuseoff  g ԀLicenseException  X ENCf  g f  g havebeenconsolidatedintoanewf  g Ԁparagraphf  g Ԁ(f)f  g . !L   Thisrulereplacesthepreviousillustrativedescriptionsof retailandother equivalent %4!" functionalityencryptioncommoditiesandsoftware(eligibleforexportandreexporttoboth '(#$  governmentendusersandnon governmentendusersinparagraph(b)(3)),withanexclusivelistin )%& paragraph(b)(2)ofthoseencryptioncommoditiesandsoftwarethatareeligibleonlytonon +'(  governmentendusers.Exceptforcommoditiesandsoftwarethatprovidean opencryptographic  interfaceorthatarespecifiedinparagraph(b)(2),allencryptionproductseligibleforLicense  ExceptionENCqualifyunderparagraph(b)(3),therebyremovingtheneedfor retailorother   equivalentfunctionalityconsiderations.     Thisrulealsoreplacestherequirementf  g f  g forobtainingf  g ԀspecificU.S.Governmentauthorization t  beforeexportingorreexportingunderparagraph(b)(3)withaf  g 30f  g daywaitingperiod,calculatedin h  calendarf  g daysf  g f  g beginningwithf  g Ԁthedatethatanencryptionreviewrequestforthecommodityorsoftware \  isregisteredwithBIS.f  g ForencryptionreviewsthatarenotcompletedbyBISwithinthis30day P period,theexportermayshipafterthewaitingperiodhaselapsed.Aswithsimilarrequirementsinthe D currentrule,the30f  g f  g daywaitingperiodf  g ԀdoesnotincludeanytimethatBISplacesthereviewrequeston 8  holdwithoutactionf  g f  g .f  g ԀUponcompletionofBISsreview,BISwillprovidewrittennoticeofthe ,| provisions,ifany,of740.17underwhichtheencryptionitemmaybeexportedorreexported. f  g Ԁf  g f  g   p   Thisrulealsoremovestheword retailfrom740.17(b)(3),exceptinparagraph(b)(3)(ii)(A),  X whichdescribestheextenttowhichitemspreviouslyclassifiedas retailmaybeexportedand !L reexportedunderf  g paragraphf  g Ԁ(b)(3)f  g ԀwithoutfurtherU.S.Governmentreview.BISbelievesthatthese #@  changeswillhelpreadersmorereadilydistinguishtheprocedureformakingcertainnon massmarket %4!" encryptioncommoditiesandsoftwareeligibleforexportandreexportf  g underLicenseExceptionENC '(#$ fromtheprocedurebywhich massmarketencryptioncommoditiesandsoftwareareremovedfrom )%& thescopeofECCNs5A002or5D002pursuantto742.15(b)(2)oftheEAR. +'( f  g f  g Reportingrequirements(740.17(e))  Ѐ       ThisruleclarifiesthatthesemiannualreportingrequirementsofLicenseExceptionENCapply   toexportsfromtheUnitedStatestoalldestinationsexceptCanada,andtoreexportsfromCanadato t  otherforeigndestinations.f  g f  g Inconformancewiththerevisionsto740.17(b)(3),underparagraph(e)(4) h  ( Exclusionsfromreportingrequirements)thisruleremovestheword retailandthephrase designed \  for,bundledwith,orpre-loadedonsingleCPUcomputers,laptopsorhand-helddevices.f  g f  g f  g f  g f  g  P f  g OtherchangestoLicenseExceptionENCf  g  8   ThisruleeliminatesallreferencestorequestingeligibilityfordeminimistreatmentfromLicense  p ExceptionENCbecausesuchspecialrequestsarenolongerrequiredduetothechangesin d 734.4(a)(2)and734.4f  g (b)f  g Ԁmadebythisrule.Thisrulerevises740.17(d)bychangingthetitlefrom  X  Reviewrequirementsto Reviewrequestprocedurestomoreaccuratelyreflectitscontents.This !L rulealsof  g substantiallyreorganizesparagraph(d)(3)andinstitutesanemailnotificationprocedurein #@  placeofthepreviousrequirementthatproductkeylengthincreasesauthorizedunderthisparagraphbe %4!" certifiedtoBISandtheENCEncryptionRequestCoordinatorinaletterfromacorporateofficial. '(#$   Lastly,thisrulef  g containsanewprovisionauthorizingBIStocontactthesubmitterofareview +'( requestatanytime,evenafterthef  g f  g 30f  g Ԁdaywaitingperiodsprescribedin740.17(b)(2)(ii)or  740.17(b)(3)(ii)(B)havepassed,torequestadditionalinformationaboutanencryptionitem.Ifthe  submitterdoesnotsupplytherequestedinformationwithin14daysf  g f  g afterreceivingthef  g Ԁrequestfrom  BIS,BISmaysuspendorrevokethesubmittersrighttouseLicenseExceptionENCfortheitem   aboutwhichtheadditionalinformationisf  g f  g soughtf  g .f  g ԀXzXXXzIfthesubmitterrequestsadditionaltimetocollectthe   informationbeforethedateitisduetoBIS,BISmaygrantuptoanadditional14daysifBISconcludes t  thatsuchadditionaltimeisnecessary.#XzXXXzl#Ԁ h  SupplementNo.3toPart740 P   ThisruleaddsCyprus,Estonia,Latvia,Lithuania,Malta,SlovakiaandSloveniatoSupplement 8 No.3topart740becausethosecountrieswereadmittedtotheEuropeanUniononMay1,2004and ,| werenotpreviouslylistedinthissupplement.(Althoughf  g thef  g CzechRepublic,HungaryandPolandwere  p alsoadmittedtotheEuropeanUniononMay1,2004,thesethreecountrieswerepreviouslylistedin d SupplementNo.3topart740.)Thissupplementidentifiesthecountriesthatareeligibletoreceiveboth  X  massmarketencryptionproductsandnon massmarketencryptionitemsfromtheUnitedStates, !L immediatelyaftertheU.S.originitemsareregisteredwithBISforreview(i.e.withouta30daywaiting #@  period)under740.17(a)or742.15(b)(2)oftheEAR.Theadditionofthesecountriesto %4!" SupplementNo.3continuestheUnitedStatesGovernmentspracticeofauthorizingsuchimmediate '(#$ exportsandreexportsofencryptionitemstocountriesintheEuropeanUnionslicensefreezone.This )%& rulealsochangesthetitleofthissupplementfrom LicenseExceptionENCcountrygroup.to +'(  Countrieseligiblefortheprovisionsof740.17(a).Therevisedtitlemoreaccuratelydescribesthe  supplement,whichliststhecountriesthatarerelevanttotheprovisionsof740.17(a)butdoesnotset  forthanygeographiclimitationontheuseofotherprovisionsofLicenseExceptionENC.  Section742.15󀀀     Thisruleaddsto742.15(b)(1)theemailaddressesf  g off  g BISandthef  g ENCf  g Encryptionf  g f  g Requestf  g  h  Coordinatortowhichadvancenotificationsofexportsandreexportsofencryptionitemscontrolled \  underf  g ԀECCNsf  g Ԁ5A992,5D992or5E992mustbesentf  g Ԁifapersonwishestoexportorreexportsuch P itemswithoutalicenseunderthissectionf  g .f  g  D SupplementNo.6toPart742 ,|   ToexpeditethehandlingofencryptionreviewrequestsandreducetheneedforU.S. d Governmentrequestsforadditionalinformationfromsubmitters,thisrulerevisesparagraph(c)(8)to  X requirethatsimilarinformationbeprovidedregardingthirdpartyencryptionhardwarecomponentsasis !L currentlyrequiredforsoftwarecomponents.Thisrulealsorevisesparagraph(c)(11)f  g f  g byeliminatingf  g Ԁthe #@  word retailinconformancewiththerevisionsto740.17(b)(3). %4!"  +'( f  g Section744.9    Thisruleupdatestheparagraphpertainingto RestrictionsonTechnicalAssistancebyU.S.  PersonswithRespecttoEncryptionItemsbyreplacingapreviousreferenceto classificationrequest   with encryptionreviewrequest,andbyaddingreferencestoXzXXXz7#XzXXXz{#XzXXXz40.17(a)(1)#XzXXXz{#XzXXXzԀ#XzXXXzD|#XzXXXzand7#XzXXXz|#XzXXXz40.17(a)(3)#XzXXXz|#Ԁin   conformancewiththerevisionstoLicenseExceptionENC. t  f  g Section772.1!Definitionof HoldWithoutAction \    Thisruleaddsasentencetotheendofthedefinitiontomakeclearthat,unliketheprocedure D forlicenseapplications,BISisnotrestrictedtothecircumstancesdescribedin750.4(c)oftheEAR 8 whendeterminingthatanencryptionreviewrequestmaybeplacedon holdwithoutactionstatus. ,| AdministrativeChanges d   ThisrulerevisestheemailaddressoftheENCEncryptionRequestCoordinatorwhereverit !L appearsin740.9,XzXXXz#XzXXXz0#740.13,andXzXXXz#XzXXXz#740.17from4jO  5  enc@ncsc.mil6ԀOg   7 pԀto4k pO  5  enc@nsa.gov6Og   7 ˁԀtoreflectthecurrente #@  mailaddressofthatorganization.In740.17(e)(5)(i),thisrulerevisesthemailingaddressoftheBIS %4!" officetowhichsemiannualLicenseExceptionENCreportsaresent,toreflectthecurrentnameofthat '(#$ office. )%&    `  +'(   AlthoughtheExportAdministrationActexpiredonAugust20,2001,ExecutiveOrder13222  ofAugust17,2001(3CFR,2001Comp.,p.783(2002)),asextendedbytheNoticeofAugust6,  2004,69FR48763(August10,2004)continuestheRegulationsineffectundertheInternational  EmergencyEconomicPowersAct.   RulemakingRequirements: t    1.ThisrulehasbeendeterminedtobesignificantforpurposesofE.O.12866. \    2.Notwithstandinganyotherprovisionoflaw,nopersonisrequiredtorespondto,norshall D anypersonbesubjecttoapenaltyforfailuretocomplywithacollectionofinformation,subjecttothe 8 requirementsofthePaperworkReductionActf  g of1995(44U.S.C.3501etseq.)f  g (PRA),unlessthat ,| collectionofinformationdisplaysacurrentlyvalidOfficeofManagementandBudgetf  g (OMB)f  g Control  p Number.Thisrulecontainscollectionsofinformationsubjecttothef  g PRAf  g .Thesecollectionshavebeen d approvedbyf  Ԁg f  g OMBg f  g Ԁundercontrolnumber06940088, MultiPurposeApplication,whichcarriesa  X burdenhourestimateof58minutestoprepareandsubmitformBIS748,andcontrolnumber0694 !L 0104 EncryptionItemsUndertheJurisdictionoftheDepartmentofCommerce,FormsBIS742Rand #@  742Swhichcarriesatotalestimatedburdenof2,830hoursamonganestimated680respondents. %4!" Sendcommentsregardingtheseburdenestimatesoranyotheraspectofthesecollectionsof '(#$ information,includingsuggestionsforreducingtheburden,tof  g DavidRostker,f  g OMBDeskOfficer,f  g f  g bye )%& mailat +'( 41 O  5  david_rostker@omb.eop.gov6GO[  7 yԀorbyfaxto202.395.285f  g ;andtotheRegulatoryPolicyDivision,Bureau  ofIndustryandSecurity,DepartmentofCommerce,P.O.Box273,Washington,DC20044.    3.ThisruledoesnotcontainpolicieswithFederalismimplicationsasthistermisdefinedin   ExecutiveOrder13132.     4.TheprovisionsoftheAdministrativeProcedureAct(5U.S.C.553)requiringnoticeof h  proposedrulemaking,theopportunityforpublicparticipation,andadelayineffectivedate,are \  inapplicablebecausethisregulationinvolvesamilitaryandforeignaffairsfunctionoftheUnitedStates P (Sec.5U.S.C.553(a)(1)).Further,nootherlawrequiresthatanoticeofproposedrulemakingandan D opportunityforpubliccommentbegivenforthisrule.Becauseanoticeofproposedrulemakingandan 8 opportunityforpubliccommentarenotrequiredtobegivenforthisruleunder5U.S.C.f  g 553f  g orbyany ,| otherlaw,theanalyticalrequirementsoftheRegulatoryFlexibilityAct(5U.S.C.601etseq.)arenot  p applicable.Therefore,thisruleisbeingissuedinfinalform. d ListofSubjects !L 15CFRParts732and740 %4!"   Administrativepracticeandprocedure,Exports,Reportingandrecordkeepingrequirements. )%&  +'( 15CFRPart734    Administrativepracticeandprocedure,Exports,Inventionsandpatents,Research,Scienceand  technology.   15CFRPart742 t    Exports,Terrorism. \  15CFRPart744 D   Exports,Reportingandrecordkeepingrequirements,Terrorism. ,| 15CFRPart772 d   Exports. !L Accordingly,parts732,734,740,742,744and772oftheExportAdministrationRegulations(15 %4!" CFRparts730799)areamendedasfollows: '(#$   1.Theauthoritycitationforpart732continuestoreadasfollows: +'( Ї XzXXXz    Authority :50U.S.C.app.2401etseq.;50U.S.C.1701etseq.;E.O.13026,61FR58767,  3CFR,1996Comp.,p.228;#XzXXXzb#2XzXXXzԀE.O.13222,66FR44025,#XzXX2XzY#XzXXXzԀ3CFR,2001Comp.,p.783;#XzXXXz#XzXXXzԀNoticeof  August6,2004,69FR48763(August10,2004).#XzXXXz#XzXXXz #XzXXXz#     2.In732.2revisetheintroductorytextofparagraph(d)toreadasfollows. t   732.2f  g XzXXXzԀStepsregardingscopeoftheEAR. #XzXXXz# \  ***** D XzXXXzf  g (d)f  g f  g #XzXXXz9#XzXXXzStep4:ForeignmadeitemsincorporatinglessthanthedeminimislevelofU.S.parts,components, ,| andmaterials.#XzXXXzš#XzXXXz#XzXXXz#>XzXXXzThisstepisappropriateonlyforitemsthataremadeoutsidetheUnitedStatesandnot  p currentlyintheUnitedStates.Specialrequirementsandrestrictionsapplytoitemsthatincorporate d U.S.originencryptionitems(see734.4(a)(2)and(b)oftheEAR)#XzXX>Xzכ#XzXXXz.  X #XzXXXzF#***** #@    3.Theauthoritycitationforpart734isrevisedtoreadasfollows: '(#$   XzXXXzAuthority: 50U.S.C.app.2401etseq.;50U.S.C.1701etseq.;E.O.12938,59FR +'( 59099,3CFR,1994Comp.,p.950;E.O.13020,61FR54079,3CFR,1996Comp.p.219;E.O.  13026,61FR58767,3CFR,1996Comp.,p.228;#XzXXXz=#2XzXXXzE.O.13222,66FR44025,#XzXX2Xz#XzXXXzԀ3CFR,2001  Comp.,p.783;#XzXXXz#XzXXXzԀNoticeofAugust6,2004,69FR48763(August10,2004);NoticeofNovember4,  2004,69FR64637(November8,2004)#XzXXXz^#XzXXXz.#XzXXXz(#      4.In734.4reviseparagraph(a)(2),addparagraph(b),andrevisetheintroductorytextsof t  paragraphs(c)and(d)toreadasfollows: h   734.4DeMinimisU.S.Content.  D (a)*** ,| (2)ForeignproducedencryptiontechnologythatincorporatesU.S.originencryptiontechnology d controlledbyECCN5E002issubjecttotheEARregardlessoftheamountofU.S.origincontent.  X *** #@  (b)Specialrequirementsforcertainencryptionitems.ForeignmadeitemsthatincorporateU.S.origin '(#$ itemsthatarelistedinthisparagrapharesubjecttotheEARunlesstheymeetthedeminimisleveland )%& destinationrequirementsofparagraph(c)or(d)ofthissectionandtherequirementsofthisparagraph. +'(     (1)TheU.S.origincommoditiesorsoftware,ifcontrolledunderECCNs5A002.a.1,.a.2,  .a.5,or.a.6,or5D002,musthavebeen:     ` (i)AuthorizedforlicenseexceptionTSUbecauseofhavingmetthenotification   requirementsof740.13(e)oftheEAR(ECCN5D002only); p  t     ` (ii)AuthorizedforLicenseExceptionENCbyBISafterareviewpursuantto \  740.17(b)(3)oftheEAR;or P    ` (iii)AuthorizedforLicenseExceptionENCbyBISafterareviewpursuantto 8 740.17(b)(2),andtheforeignmadeproductwillnotbesenttoanydestinationinCountryGroupE:1 ,| inSupplementNo.1topart740oftheEAR.  p   (2)TheU.S.originencryptionitems,ifcontrolledunderECCNs5A992,5D992,or5E992  X must: !L    ` (i)Havemetthenotificationrequirementsof742.15(b)(1)oftheEAR;or #@     ` (ii)HavebeendeterminedbyBIStobe massmarketcommoditiesorsoftwareaftera '(#$ reviewinaccordancewith742.15(b)(2)oftheEAR(ECCNs5A992and5D992only);or )%&    `  +'(    ` (iii)Beanitemdescribedin742.15(b)(3)(ii)orf  g 742.15(b)(3)(iii)oftheEAR.    Notetoparagraph(b):SeesupplementNo.2tothispartfordeminimiscalculationproceduresand   reportingrequirements.    h    (c)Exceptasprovidedinparagraphs(a)and(b)(1)(iii)andsubjecttotheprovisionsofparagraphs h  (b)(1)(i),(b)(1)(ii)and(b)(2)ofthissection,thefollowingreexportsarenotsubjecttotheEARwhen \  madetoaterroristsupportingcountrylistedinCountryGroupE:1(seeSupplementNo.1topart740 P oftheEAR). D ̀ ,| ***  p (d)Exceptasprovidedinparagraph(a)ofthissectionandsubjecttotheprovisionsofparagraph(b)  X ofthissection,thefollowingreexportsarenotsubjecttotheEARwhenmadetocountriesotherthan !L thosedescribedinparagraph(c)ofthissection #@  *** '(#$   5.Theauthoritycitationforpart740continuestoreadasfollows: +'( Ї  XzXXXzAuthority: 50U.S.C.app.2401etseq.;50U.S.C.1701etseq.;Sec.901911,Pub.L.  106387;E.O.13026,61FR58767,3CFR,1996Comp.,p.228;E.O.13222,66FR44025,3  CFR,2001Comp.,p.783;NoticeofAugust6,2004,69FR48763(August10,2004).#XzXXXz#XzXXXz  #XzXXXz|#  6.In740.9,reviseparagraph(c)(8)toreadasfollows:    740.9f  g Temporaryimports,exports,andreexports(TMP).  h  ***** P f  g (c)f  g f  g Ԁ*** 8 f  g   f  g (8)f  g f  g Notificationofbetatestencryptionsoftwaref  g f  g .Forbetatestencryptionsoftwareeligible  p underthislicenseexceptionyoumust,bythetimeofexportorreexport,submittheinformation d describedinparagraphs(a)through(e)ofSupplementNo.6topart742oftheEARbyemailtoBIS  X at4/ lO  5  crypt@bis.doc.gov6 O4  7  bԀandtotheENCEncryptionRequestCoordinatorat48.1O  5  enc@nsa.gov6O#b)(3  7.1Q. !L   7.In740.13,reviseparagraph(e)asfollows. )%&  +'(  740.13Technologyandsoftware!unrestricted(TSU).   *****  (e)Encryptionsourcecode(andcorrespondingobjectcode).   (1)f  g f  g Scopeandeligibilityf  g f  g .Thisf  g Ԁparagraph(e)authorizesexportsandreexports,withoutreview,of t  encryptionsourcecodecontrolledbyECCN5D002that,ifnotcontrolledbyf  g ECCNf  g 5D002,would h  beconsideredpubliclyavailableunder734.3(b)(3)oftheEAR.Suchsourcecodeiseligiblefor \  LicenseExceptionTSUunderthisparagraph(e)evenifitissubjecttoanexpressagreementforthe P paymentofalicensingfeeorroyaltyforcommercialproductionorsaleofanyproductdevelopedusing D thesourcecode.Thisf  g Ԁparagraphalsoauthorizestheexportandreexportofthecorrespondingobject 8 code(i.e.,thatwhichiscompiledfromsourcecodethatisauthorizedforexportandreexportunderthis ,| paragraph)ifboththeobjectcodeandthesourcecodefromwhichitiscompiledwouldbeconsidered  p publiclyavailableunder734.3(b)(3)oftheEAR,iftheywerenotcontrolledunderf  g ECCNf  g 5D002. XzXXXz d (2)f  g f  g Restrictionsf  g f  g .Thisparagraph(e)doesnotauthorize: !L f  g f  g   (i)exportorreexportof#XzXX Xz!# XzXXXzԀanyencryptionsoftwarecontrolledunderECCN5D002#XzXX Xzr#Ԁthatdoesnot %4!" meettherequirementsofparagraph(e)(1),evenifthesoftwareincorporatesorisspeciallydesignedto '(#$ useotherencryptionsoftwarethatmeetstherequirementsofparagraph(e)(1)ofthissection;or )%& f  g  +'( f  g   (ii)anyknowingexportorreexporttoacountryf  g listedf  g inCountryGroupE:1inSupplementNo.  1topart740oftheEAR.  (3)f  g f  g Notificationrequirementf  g f  g .YoumustnotifyBISandtheENCEncryptionRequestCoordinatorvia   emailoftheInternetlocation(e.g.,URLorInternetaddress)ofthesourcecodeorprovideeachof   themacopyofthesourcecodeatorbeforethetimeyoutakeactiontomakethesoftwarepublicly t  availableasthattermisdescribedin734.3(b)(3)oftheEAR.Ifyouelecttomeetthisrequirementby h  providingcopiesofthesourcecodetoBISandtheENCEncryptionRequestCoordinator,youmust \  provideadditionalcopiestoeachofthemeachtimethecryptographicfunctionalityofthesoftwareis P updatedormodified.IfyouelecttoprovidetheInternetlocationofthesourcecode,youmustnotify D BISandtheENCEncryptionRequestCoordinatoreachtimetheInternetlocationischanged,butyou 8 arenotrequiredtonotifythemofupdatesormodificationsmadetotheencryptionsoftwareatthe ,| previouslynotifiedlocation.Inallinstances,submitthenotificationorcopytocrypt@bis.doc.gov Ԁand  p to4:.1xO  5  enc@nsa.gov6hO|b)(3  7.1} . d Notetoparagraph(e).PostingencryptionsourcecodeandcorrespondingobjectcodeontheInternet !L (e.g.,FTPorWorldWideWebsite)whereitmaybedownloadedbyanyoneneitherestablishes #@   knowledgeofaprohibitedexportorreexportforpurposesofthisparagraph,nortriggersany red %4!" flagsnecessitatingtheaffirmativedutytoinquireunderthe KnowYourCustomerguidanceprovided '(#$ inSupplementNo.3topart732oftheEAR. )%&  +'( XzXXXz  8.In740.17,revisetheintroductorytextandparagraphs(a),(b),(d)and(e)andadd  paragraph(f)toreadasfollows:  #XzXXXzx# 740.17Encryptionsoftwareandcommodities(ENC).    Subjecttotheeligibilitycriteriaandrestrictionsdescribedinparagraphs(a),(b)and(f)ofthissection, t  LicenseExceptionENCisavailablefortheexportandreexportoff  g :commoditiesandsoftware h  controlledbyECCNs5A002f  g .a.1,.a.2,.a.5,and.a.6,5B002,and5D002thatdonotmeetthe mass \  marketcriteriaoftheCryptographyNote(Note3)ofCategory5,Part2( InformationSecurity)of P theCommerceControlList(SupplementNo.1topart774oftheEAR);technologycontrolledby D ECCN5E002;andcertaintechnicalassistanceasdescribedin744.9off  g thef  g EAR.Theinitialexport 8 orreexportofanencryptioncommodityorsoftwareunderparagraphs(b)(2)or(b)(3)ofthissectionis ,| subjecttoaf  g f  g 30daywaitingperiod,asdescribedinparagraph(d)(2)ofthissection.Inaddition,  p personsexportingorreexportingf  g Ԁunderparagraphs(a),(b)(2)or(b)(3)ofthissectionmustfilethe d semiannualreportsrequiredbyparagraph(e)ofthissection.Reviewrequestproceduresforf  g   X encryptionitemseligibleforLicenseExceptionENCaredescribedinparagraph(d)ofthissection !L >XzXXXz(e.g.,foritemsthathavenotpreviouslybeenreviewed,orforitemsthathavebeenreviewedbutfor #@  whichthecryptographicfunctionalityhasbeenchanged)#XzXX>Xz#.See742.15(b)(2)oftheEARforsimilar %4!" reviewproceduresfor massmarketencryptioncommoditiesandsoftware. '(#$ (a)Exports,reexports,andtechnicalassistancetocountrieslistedinSupplementNo.3tothispart. +'( Thisparagraph(a)authorizesexportorreexportofitemscontrolledunderECCNs5A002.a.1,.a.2,  .a.5,or.a.6,5B002,5D002,or5E002,andprovisionoftechnicalassistancedescribedin744.9of  theEAR,toendf  g f  g Ԅf  g usersincountrieslistedinSupplementNo.3topart740oftheEAR.Thisparagraph  alsoauthorizesexportsorreexportstoforeignsubsidiariesandofficesofendf  g f  g Ԅf  g usersheadquarteredin   CanadaorincountrieslistedinSupplementNo.3topart740.Inaddition,thetransactionmustmeet   thetermsofparagraphs(a)(1),(a)(2),or(a)(3)ofthissection. t    (1)Internaldevelopmentofnewproducts.Nopriorreviewisrequiredforexportsorreexports \  ofU.S.originencryptionitemsorrelatedtechnicalassistanceunderthisparagraph(a)tof  g privatesector P endusersthatareheadquarteredinCanadaorincountrieslistedinSupplementNo.3topart740,for D internaluseforthedevelopmentofnewproductsbythosef  g Ԁendusersandtheirf  g Ԁofficesorsubsidiaries. 8 XzXXXzAnyencryptionitemproducedordevelopedwithanitemexportedorreexportedunderthisparagraph ,| (a)(1)issubjecttotheEARandrequiresreviewandauthorizationbeforeanysaleorretransferoutside  p oftheprivatesectorenduserthatdevelopedit.#XzXXXz)#ԀInthisparagraph(a)(1),privatesectorenduser d means:  X f  g f  g    ` (i)Anindividualwhoisnotactingonbehalfofanyforeigngovernment;or #@  f  g f  g    ` (ii)Acommercialfirm(includingitssubsidiaryandparentfirms,andothersubsidiaries '(#$ ofthesameparent)thatisnotwhollyownedby,orotherwisecontrolledbyoractingonbehalfof,any )%& foreigngovernment. +'( Ї  (2)ItemspreviouslyreviewedbytheU.S.Government.NoadditionalU.S.Government  reviewisrequiredunderthisparagraph(a)forexportorreexportofencryptioncommoditiesor  softwareorpartsorcomponentsthereofthat,priortoOctober19,2000,wereauthorizedforexportor  reexportunderalicenseorEncryptionLicensingArrangement,orwerereviewedandauthorizedfor   exportandreexporttoentitiesotherthanU.S.subsidiariesunderLicenseExceptionENC.No   additionalU.S.Governmentreviewisrequiredunderthisparagraphforexportorreexportof t  encryptiontechnologythat,priortoOctober19,2000,wasapprovedforexportorreexportundera h  licenseorEncryptionLicensingArrangement. \    (3)Othertransactions.Foranyusenotdescribedinparagraph(a)(1)ofthissectionf  g ,before D youexportorreexportanyitemf  g orf  g f  g relatedf  g Ԁtechnicalassistancef  g Ԁthathasnotbeenpreviouslyreviewed 8 bytheU.S.Governmentandauthorizedunderthisparagraph(a)XzXXXz,#XzXXXz6#Ԁyoumustsubmitareviewrequestin ,| accordancewithparagraph(d)ofthissection.  p (b)ExportsandreexportstocountriesnotlistedinsupplementNo.3tothispart.  X Ѐ(1)EncryptionitemsforU.S.subsidiaries.Thisparagraph(b)(1)authorizesexport,orreexportor #@  itemscontrolledunderECCNs5A002.a.1,.a.2,.a.5,or.a.6,5B002,5D002or5E002: %4!"    `     h     (i)Toany U.S.subsidiary;and )%&  +'(   (ii)ByaU.S.companyanditssubsidiariestoforeignnationalswhoareemployees,contractors  orinternsofaU.S.companyoritssubsidiariesiftheitemsareforinternalcompanyuse,includingthe  developmentofnewproducts.    (iii)Generalrestriction.Allitemsproducedordevelopedwithcommodities,softwareor   technologyexportedunderthisparagraph(b)(1)aresubjecttotheEARandrequirereviewand t  authorizationbeforesaleortransferoutsidetheU.S.companyanditssubsidiaries. h  (2)Encryptioncommoditiesandsoftwarerestrictedtonon governmentendusers.Thisparagraph P (b)(2)authorizestheexportandreexportofitemsdescribedin740.17(b)(2)(iii)oftheEARthatdo D notprovidean opencryptographicinterfaceandthatarecontrolledbyECCNs5A002.af  g f  g .f  g 1,.af  g f  g .f  g 2,.a.5, 8 or.a.6,or5D002toindividuals,commercialfirms,andotherentitiesthatarenot governmentend ,| usersandthatarenotlocatedinacountrylistedinSupplementNo.3tothispart.Inaddition,the  p transactionmustmeettheprovisionsofeither740.17(b)(2)(i)or(ii)oftheEAR. d   (i)CommoditiesandsoftwarepreviouslyreviewedbytheU.S.Government.Noadditional !L U.S.Governmentreviewisrequiredunderthisparagraph(b)(2)forexportorreexportsofencryption #@  commoditiesorsoftwareorpartsorcomponentsthereofthat,priortoOctober19,2000,were %4!" authorizedforexportorreexportunderalicenseorEncryptionLicensingArrangement,orwere '(#$ reviewedandauthorizedforexportandreexporttoentitiesotherthanU.S.subsidiariesunderLicense )%& ExceptionENC. +'( Ї  (ii)Othercommoditiesandsoftwarenotpreviouslyreviewed.Beforeexportingor  reexportinganyitemthathasnotbeenreviewedbytheU.S.Governmentandauthorizedunderthis  paragraph(b)(2),youmustsubmitareviewrequestinaccordancewithparagraph(d)ofthissection  andwaituntilf  g f  g 30f  g Ԁdaysafterthatrequestisregistered(asdefinedin750.4(a)(2)oftheEAR)withBIS.   Daysduringwhichthereviewrequestison holdwithoutactionstatusarenotcountedtowards   fulfillingthef  g f  g 30f  g Ԁdaywaitingperiod. t    (iii)Theencryptioncommodities,softwareandcomponentseligibleforexportorreexport \  underthisparagraph(b)(2)(seeparagraph(b)(3)ofthissectionforcommodities,softwareand P componentsnotlistedinthisparagraph(b)(2)(iii))are: D XzXXXz  #XzXXXz#XzXXXz(A)Networkinfrastructurecommoditiesandsoftware,andpartsandcomponentsthereof ,| (includingcommoditiesandsoftwarenecessarytoactivateorenablecryptographicfunctionalityin  p networkinfrastructureproducts)providingsecureWideAreaNetwork(WAN),MetropolitanArea d Network(MAN),VirtualPrivateNetwork(VPN),satellite,cellularortrunkedcommunications  X meetinganyofthefollowingwithkeylengthsexceeding64bitsforsymmetricalgorithms: !L #XzXXXz #XzXXXzd   ` d(1)#XzXXXz}#XzXXXzAggregateencryptedWAN,MAN,VPNorbackhaulthroughput(includes %4!" communicationsthroughwirelessnetworkelementssuchasgateways,mobileswitches,controllers,etc) '(#$ greaterthan44Mbps#XzXXXz#XzXXXz.#XzXXXz#XzXXXz;or )%&  +'( #XzXXXzX#XzXXXz   ` (2)#XzXXXz#XzXXXzWire(line),cableorfiber-opticWAN,MANorVPNsingle-channelinputdata  rateexceeding44Mbps;or#XzXXXz-#XzXXXz     `    ` (3)#XzXXXz#XzXXXzԀ#XzXXXzz#XzXXXzMaximumnumberofconcurrentencrypteddatatunnelsorchannelsexceeding250;   or#XzXXXz#XzXXXz      ` (4)#XzXXXze#XzXXXzԀ#XzXXXz#XzXXXzAir-interfacecoverage(e.g.,throughbasestations,accesspointstomesh h  networks,bridges,etc.)exceeding1,000meters,whereanyofthefollowingapplies:#XzXXXz"#XzXXXz \     `  (i)#XzXXXz#XzXXXzMaximumdataratesexceeding5Mbps(atoperatingrangesbeyond1,000 D meters);or#XzXXXz#XzXXXz 8    `  (ii)#XzXXXzE#XzXXXzMaximumnumberofconcurrentfull-duplexvoicechannelsexceeding30;  p or#XzXXXz#XzXXXz d    `  (iii)#XzXXXzl#XzXXXzSubstantialsupportisrequiredforinstallationoruse.#XzXXXz#XzXXXz !L #XzXXXzo#XzXXXz  (B)EncryptionsourcecodethatwouldnotbeeligibleforexportorreexportunderLicense %4!" ExceptionTSUbecauseitisnotpubliclyavailableasthattermisusedin740.13(e)(1)oftheEAR.#XzXXXz#XzXXXz '(#$   (C)#XzXXXz#XzXXXzԀEncryptioncommoditiesorsoftwarethatdonotprovidean opencryptographicinterface, +'( butthathave:     ` (1)#XzXXXzY#XzXXXzԀBeenmodifiedorcustomized#XzXXXzU#XzXXXzԀforgovernmentenduser(s)orgovernmentenduse  (e.g.tosecuref  g departmentalf  g f  g ,police,f  g Ԁstatesecurityf  g ,oremergencyresponsef  g Ԁcommunications)#XzXXXz#XzXXXz;or        ` (2)Cryptographicfunctionalitythathasbeenmodifiedorcustomizedtocustomer t  specification#XzXXXz#XzXXXz;or#XzXXXz#XzXXXz h   (836! !   ` (3)Cryptographicfunctionalityor encryptioncomponent(exceptencryption P softwarethatwouldbeconsideredpubliclyavailable,asthattermisusedin740.13(e)(1)oftheEAR) D thatisuseraccessibleandcanbeeasilychangedbytheuser. 8   (D) Cryptanalyticitems#XzXXXzZ#XzXXXz;or  p #XzXXXz#XzXXXz  (E)Encryptioncommoditiesandsoftwarethatprovidefunctionsnecessaryforquantum  X cryptography;or !L   (F)Encryptioncommoditiesandsoftwarethathavebeenmodifiedorcustomizedforcomputers %4!" controlledbyECCN4A003. '(#$ #XzXXXz5#(3)Encryptioncommodities,softwareandcomponentsavailabletoboth governmentendusersand +'( tonon governmentendusers.Thisparagraphauthorizesexportandreexportofcommodities,  softwareandcomponentscontrolledbyECCNs5A002.a.1,.a.2,.a.5,or.a.6,5B002,or5D002.To  beeligibleunderthisparagraph(b)(3)therequirementsofparagraphs(b)(3)(i)and(b)(3)(ii)mustbe  met.     (i)Thecommoditiesorsoftwaremustnot: t  f  g f  g    ` (A)Providean opencryptographicinterface;or \  f  g f  g    ` (B)Belistedinparagraph(b)(2)ofthissection. D   (ii)Reviewandauthorizationrequirement.(A)Commoditiesandsoftwarepreviously ,| reviewedbytheU.S.Government.Encryptioncommodities,softwareandcomponentsreviewedand  p authorizedbyBISforexportandreexportas retailcommoditiesorsoftwareunderthisparagraph d (b)(3)priortoDecember9,2004donotrequireadditionalrevieworauthorizationforexportor  X reexportunderthisparagraph. !L    ` (B)Othercommoditiesandsoftwarenotpreviouslyreviewed.Beforeexportingor %4!" reexportinganyitemthathasnotbeenreviewedbytheU.S.Governmentandauthorizedunderthis '(#$ paragraph(b)(3),youmustsubmitareviewrequestinaccordancewithparagraph(d)ofthissection )%& andwaituntilf  g f  g 30f  g Ԁdaysafterthatrequestisregistered(asdefinedin750.4(a)(2)oftheEAR)withBIS. +'( Daysduringwhichthereviewrequestison holdwithoutactionarenotcountedtowardsfulfillingthe  f  g f  g 30f  g Ԁdaywaitingperiod.  (4)Exemptionsfromthe30daywaitingperiodandreviewrequirements.f  g      f  g (i)Exemptionsfromthe30daywaitingperiod.Itemslistedinthisparagraph(b)(4)(i)maybe t  exportedorreexportedunderauthorityofparagraphs(b)(2)or(b)(3)immediatelyuponfilingthe h  reviewrequestsrequiredbythoseparagraphsprovidedallotherrequirementsforexportorreexport \  undertheparagraphbeingrelieduponaremet. P XzXXXz   ` (A)Encryptioncommoditiesandsoftware(includingkeymanagementproducts)with 8 keylengthsnotexceeding64bitsforsymmetricalgorithms,1024bitsforasymmetrickeyexchange ,| algorithms,and160bitsforellipticcurvealgorithms;  p    ` (B)Encryptionsourcecodethatwouldnotbeconsideredpubliclyavailableforexport  X orreexportunderLicenseExceptionTSU,f  g providedthatf  g Ԁacopyofyoursourcecodeisincludedinthef  g  !L reviewrequesttoBISandtheENCEncryptionRequestCoordinator. #@  #XzXXXz#XzXXXz  #XzXXXz#XzXXXz(ii)Exemptionsfromthereviewrequirement.#XzXXXz#XzXXXzԀThefollowingproductsdonotrequirereview '(#$ underthislicenseexception,butremainsubjecttotheEAR(includingalltermsandprovisionsofthis )%& licenseexception,andalllicensingrequirementsthatmayapplytoaparticularitemortransactionfor +'( reasonsotherthanencryption):#XzXXXz#XzXXXz     ` (A)#XzXXXz'#XzXXXzCommoditiesandsoftwarethatwouldnototherwisebecontrolledunderCategory  5(telecommunicationsand"informationsecurity")oftheCommerceControlList,butthatarecontrolled   underECCN5A002or5D002onlybecausetheyincorporatecomponentsorsoftwarethatprovide   short-rangewirelessencryptionfunctions(e.g.,withanoperatingrangetypicallynotexceeding100 t  meters);#XzXXXz# h  XzXXXz   ` (B)ForeignproductsdevelopedwithorincorporatingU.S.originencryptionsource P code,componentsortoolkits(orotherwisedesignedtooperatewithU.S.products,e.g.,viasigning), D providedthattheU.S.originencryptionitems(andrelatedtechnicalassistance,asdescribedin744.9 8 oftheEAR)havepreviouslybeenreviewedandauthorizedbyBIS#XzXXXz#XzXXXzԀandthecryptographicfunctionality ,| hasnotbeenchanged.#XzXXXz#XzXXXz  p ***** !L #XzXXXzN#Ԁ(d)XzXXXzReviewrequestprocedures.#XzXXXz#XzXXXzԀTorequestreviewofyourencryptionitemsunderLicenseException %4!" ENC#XzXXXz7#>XzXXXz(e.g.,foritemsthathavenotpreviouslybeenreviewed,orforitemsthathavebeenreviewedbut '(#$ forwhichthecryptographicfunctionalityhasbeenchanged)#XzXX>Xz#XzXXXz,youmustsubmittoBISandtotheENC )%& EncryptionRequestCoordinatortheinformationdescribedinparagraph(d)(1)ofthissectionand#XzXXXz#XzXXXzin +'( paragraphs(a)through(e)ofSupplementNo.6topart742oftheEAR(GuidelinesforSubmitting  ReviewRequestsforEncryptionItems).    (1)#XzXXXz #InstructionsforrequestingreviewXzXXXz.ReviewrequestsmustbesubmittedonFormBIS-748P   (MultipurposeApplication),oritselectronicequivalent,asdescribedin748.3oftheEAR.Toensure   thatyourreviewrequestisproperlyrouted,#XzXXXz!#XzXXXzԀinsertthephrase"LicenseExceptionENC"inBlock9 t  (SpecialPurpose)ofthepaperorelectronicapplication.Also,placean"X"intheboxmarked h  "ClassificationRequest"inBlock5(TypeofApplication)ofFormBIS-748P#XzXXXz###XzXXXzԀorselect"#XzXXXzm$#XzXXXzCommodity \  Classification"#XzXXXz$#XzXXXzԀiffilingelectronically#XzXXXz*%#XzXXXz.NeithertheelectronicnorpaperformsprovideaseparateBlock P tocheckforthesubmissionofencryptionreviewrequests.Failuretoproperlycompletetheseitems D maydelayconsiderationofyourreviewrequest.Reviewrequeststhatarenotsubmittedelectronically 8 toBISshouldbemailedtotheaddressindicatedontheBIS748Pform.Seeparagraph(e)(5)(ii)of ,| thissectionforthemailingaddressfortheENCEncryptionRequestCoordinator.  p   (2)#XzXXXz%#XzXXXzActionbyBIS.#XzXXXz(#ԀUponcompletionofitsreview,BISwillsendyouwrittennoticeoff  g f  g thef  g   X provisions,ifany,ofthissectionf  g underwhichf  g youritemsmaybeexportedorreexported.IfBIShas !L not,within30daysofregistrationofacompletereviewrequestfromyou,informedyouthatyouritem #@  isnotauthorizedforLicenseExceptionENC,youmayexportorreexportundertheapplicable %4!" provisionsofLicenseExceptionENC.BISmayholdyourreviewrequestwithoutactionifnecessary '(#$ toobtainadditionalinformationorforanyotherreasonnecessarytoensureanaccuratedetermination )%& withrespecttoENCeligibility.Timeonsuch holdwithoutactionstatusshallnotbecountedtowards +'( fulfillingthe30daywaitingperiodspecifiedinthisparagraphandinparagraphs(b)(2)and(b)(3)ofthis  section.BISmayrequireyoutosupplyadditionalrelevanttechnicalinformationaboutyourencryption  item(s)orinformationthatpertainstotheireligibilityforLicenseExceptionENCatanytime,beforeor  aftertheexpirationofthef  g f  g Ԁ30daywaitingperiodspecifiedinthisparagraphandinparagraphs(b)(2)   and(b)(3)ofthissection.Ifyoudonotsupplysuchinformationwithin14daysafterreceivingarequest   foritfromBIS,BISmayreturnf  g yourf  g Ԁreviewrequest(s)withoutactionf  g orf  g f  g otherwisef  g Ԁsuspendorrevoke t  youreligibilitytouseLicenseExceptionENCforthatitem(s).XzXXXzAtyourrequest,BISmaygrantyouup h  toanadditional14daystoprovidetherequestedinformation.Anyrequestforsuchanadditional \  numberofdaysmustbemadepriortothedatebywhichtheinformationwasotherwiseduetobe P providedtoBIS,andmaybeapprovedifBISconcludesthatadditionaltimeisnecessary.#XzXXXz/#Ԁ D f  g Ԁ  (3)XzXXXzKeylengthincreases#XzXXXz1#XzXXXz.Commoditiesandsoftwarethataremodifiedonlytoupgradethe ,| keylengthusedforf  g confidentialityorkeyexchangealgorithms#XzXXXz*2#Ԁ(afterhavingbeenreviewedand  p authorizedforLicenseExceptionENCbyBIS)maybeexportedorreexportedunderthepreviously d authorizedprovisionofLicenseExceptionENCwithoutfurtherreview,provided:  X f  g f  g   (i)TheexporterorreexportercertifiestoBISandtheENCEncryptionRequestCoordinator #@  thatnochangetotheencryptionfunctionalityhasbeenmadeotherthantoupgradethekeylengthfor %4!" confidentialityorkeyexchangealgorithms; '(#$ f  g f  g   (ii)ThecertificationincludestheoriginalauthorizationnumberissuedbyBISandthedateof +'( issuance;  f  g   (iii)ThecertificationisreceivedbyBISandtheENCEncryptionRequestCoordinatorbefore   theexportorreexportoftheupgradedproduct;and   f  g f  g   (iv)Thecertificationisemailedto4*O  5  crypt@bis.doc.gov67O7cX  7X7Ԁand4O  5  f  g enc@nsa.gov6C8OW8   78.f  g  x  f  g  h  f  g (e)Reportingrequirements. P XzXXXz(1)Semi-annualreportingrequirement.#XzXXXz9#ԀSemi-annualreportingisrequiredforexportstoalldestinations 8 f  g f  g otherthanf  g ԀCanada,andf  g Ԁforf  g ԀreexportsfromCanada,underthislicenseexception.f  g XzXXXzf  g Certainencryption ,| itemsandtransactionsareexcludedfromthisreportingrequirement(seeparagraph(e)(4)ofthis  p section).Forinstructionsonhowtosubmityourreports,seeparagraph(e)(5)ofthissection. d #XzXXXzD;#XzXXXz(2)f  g f  g Generalinformationrequiredf  g f  g .#XzXXXz<#XzXXXzԀExportersmustincludeallofthefollowingapplicableinformationin !L theirreports: #@    (i)Foritemsexported(orreexportedfromCanada)toadistributororotherreseller,including '(#$ subsidiariesofU.S.firms,thenameandaddressofthedistributororreseller,theitemandthequantity )%& exportedorreexportedand,ifcollectedbytheexporteraspartofthedistributionprocess,the +'( end-usersnameandaddress;    (ii)Foritemsexported(orreexportedfromCanada)toindividualconsumers#XzXXXzk=#XzXXXzԀthroughdirectsale  (providedthetransactionisnotexemptedfromreportingunderparagraph(e)(4)(iii)or(e)(4)(iv)ofthis   section),#XzXXXz/@#thenameandaddressoftherecipient,theitem,andthequantityexported;     (iii)ForexportsofECCN5E002itemstobeusedfortechnicalassistancethatarenotreleased h  by744.9oftheEAR,thenameandaddressoftheend-user;and \    (iv)Foreachitem,theauthorizationnumberandthenameoftheitem(s)exported(or D reexportedfromCanada). 8  XzXXXzf  g f  g (3)f  g f  g Informationonforeignmanufacturersandproductsthatuseencryptionitemsf  g f  g .f  g #XzXXXzC#f  g XzXXXzԀFordirectsalesor  p transfers,underLicenseExceptionENC,ofencryptioncomponents,sourcecode,generalpurpose d toolkits,equipmentcontrolledunderECCN5B002,technology,oritemsthatprovidean open  X cryptographicinterfacetoforeigndevelopersormanufacturerswhenintendedforuseinforeign !L productsdevelopedforcommercialsale,youmustsubmitthenamesandaddressesofthe #@  manufacturersusingtheseencryptionitemsand,ifyouknowwhentheproductismadeavailablefor %4!" commercialsale,anon-proprietarytechnicaldescriptionoftheforeignproductsforwhichthese '(#$ encryptionitemsarebeingused(e.g.,brochures,otherdocumentation,descriptionsorotheridentifiers )%& ofthefinalforeignproduct;thealgorithmandkeylengthsused;generalprogramminginterfacestothe +'( product,ifknown;anystandardsorprotocolsthattheforeignproductadheresto;andsourcecode,if  available).  #XzXXXzLD# XzXXXzf  g f  g (4)f  g f  g Exclusionsfromreportingrequirementsf  g f  g .f  g #XzXXXzI#f  g XzXXXzԀReportingisnotrequiredforthefollowingitemsand   transactions:     (i)Anyencryptionitemexportedorreexportedunderparagraph(a)(1)or(b)(1)ofthissection; h    (ii)Encryptioncommoditiesorsoftwarewithasymmetrickeylengthnotexceeding64bits; P   (iii)Encryptioncommoditiesandsoftwareauthorizedunderparagraph(b)(3)ofthissection, 8 exported(orreexportedfromCanada)toindividualconsumers#XzXXXz)J#XzXXXz; ,|   (iv)Encryptionitemsexported(orreexportedfromCanada)#XzXXXzL#Ԁviafreeandanonymous d download;  X   (v)EncryptionitemsfromortoaU.S.bank,financialinstitutionoritssubsidiaries,affiliates, #@  customersorcontractorsforbankingorfinancialoperations; %4!"   (vi)Itemsthatincorporatecomponentslimitedtoprovidingshort-rangewirelessencryption )%& functions; +'( Ї  (vii)Generalpurposeoperatingsystems,ordesktopapplications(e.g.,e-mail,browsers,  games,wordprocessing,database,financialapplicationsorutilities)authorizedunderparagraph(b)(3)  ofthissection;    (viii)ClientInternetapplianceandclientwirelessLANcards;or     (ix)Foreignproductsdevelopedbybundlingorcompilingofsourcecode. h  XzXXXz(5)f  g f  g Submissionrequirementsf  g f  g .#XzXXXzP#Youmustsubmitthereportsrequiredunderthissection,semiannually, P toBISandtotheENCEncryptionRequestCoordinator,unlessotherwiseprovidedinthisparagraph D (e)(5).ForexportsoccurringbetweenJanuary1andJune30,areportisduenolaterthanAugust1of 8 thatyear.ForexportsoccurringbetweenJuly1andDecember31,areportisduenolaterthan ,| February1thefollowingyear.Thesereportsmustbeprovidedinelectronicform.Recommendedfile  p formatsforelectronicsubmissionincludespreadsheets,tabulartextorstructuredtext.Exportersmay d requestotherreportingarrangementswithBIStobetterreflecttheirbusinessmodels.Reportsmaybe  X sentelectronicallytoBISat45O  5  crypt@bis.doc.gov6TOT  7_*UԀandtotheENCEncryptionRequestCoordinatorat !L 4;erO  5  enc@nsa.gov6UOU   7&V,ordisksandCDscontainingthereportsmaybesenttothefollowingaddresses: #@   (88  (i) ` DepartmentofCommerce,BureauofIndustryandSecurity,OfficeofNationalSecurity '(#$ andTechnologyTransferControls,14thStreetandPennsylvaniaAve.,N.W.,Room2705, )%& Washington,D.C.20230,Attn:EncryptionReports,and +'( Ї  (ii) ` Attn:ENCEncryptionRequestCoordinator,9800SavageRoad,Suite6131,Ft.  Meade,MD207556000.   XzXXXz(f)#XzXXXzfY#Restrictions.   Notwithstandinganylanguageelsewhereinthissection,LicenseExceptionENCdoesnotauthorize: t  (1)Anyexportorreexportofany cryptanalyticitemtoany governmentenduser(asthatdefinition \  isappliedtoencryptionitems);or P (2)Anyexportorreexportofany opencryptographicinterfaceitemtoanyendf  g f  g Ԅf  g usernotlocatedin 8 orheadquarteredinCanadaorincountrieslistedinSupplementNo.3part740oftheEAR;or ,| (3)Anyexportorreexportto,orprovisionofanyserviceinanycountryf  g listedf  g inCountryGroupE:1in d SupplementNo.1topart740oftheEAR;or  X (4)Furnishingsourcecodeortechnologytoanynationalofacountryf  g listedf  g inCountryGroupE:1.XzXXXz #@  #XzXXXz]#XzXXXz  9.ReviseSupplementNo.3topart740toreadasfollows: '(#$ SupplementNo.3toPart740!Countrieseligiblefortheprovisionsof740.17(a). +'( Ї#XzXXXz^#Austria    Australia `      Belgium `     h       Cyprus   CzechRepublic   Estonia t  Denmark `     h      h  Finland \  France   `     h      P Germany D Greece `     h      8 Hungary ,| Ireland   `     h     p Italy d Japan   `     h       X Latvia !L Lithuania #@  Luxembourg %4!" Malta '(#$ Netherlands `     h      )%& NewZealand +'( Norway `     h       Poland  Portugal  Slovakia   Slovenia `     h        Spain t  Sweden `     h      h  Switzerland \  UnitedKingdom P   10.Theauthoritycitationforpart742isrevisedtoreadasfollows: 8 XzXXXz  Authority: 50U.S.C.app.2401etseq.;50U.S.C.1701etseq.;18U.S.C.2510etseq.;  p 22U.S.C.3201etseq.;42U.S.C.2139a;Sec.901-911,Pub.L.106-387;Sec.221,Pub.L. d 107-56;Sec1503,Pub.L.108-11,117Stat.559;E.O.12058,43FR20947,3CFR,1978Comp.,  X p.179;E.O.12851,58FR33181,3CFR,1993Comp.,p.608;E.O.12938,59FR59099,3CFR, !L 1994Comp.,p.950;E.O.13026,61FR58767,3CFR,1996Comp.,p.228;E.O.13222,66FR #@  44025,3CFR,2001Comp.,p.783;PresidentialDetermination2003-23ofMay7,2003,68FR %4!" 26459,May16,2003;NoticeofAugust6,2004,69FR48763(August10,2004);Noticeof '(#$ November4,2004,69FR64637(November8,2004)#XzXXXzf#XzXXXz.#XzXXXzi# XzXXXz )%& _!! +'(   11.In742.15,revisethefirstsentenceofparagraph(b)(1)andthelastsentenceofthe  introductorytexttoparagraph(b)(2)toreadasfollows:  f  g 742.15EncryptionItems.    f  g ***** t    f  g (b)f  g *** h  #XzXXXzi#   ` f  g (1)Notificationrequirementforspecifiedencryptionitems.Youmayexportor P _!!reexport_!!Ԁencryptionitemscontrolledunder_!!ECCNf  g s_!!f  g Ԁ5A992,5D992,orf  g f  g 5E992andf  g Ԁidentif  g fiedin D paragraphs(b)(1)(_!!i_!!)or(b)(1)(ii)ofthissectiontomostdestinationswithoutalicense(_!!NLR_!!:No 8 LicenseRequired),providedthatyouhavesubmittedtoBISandtothef  g _!!ENC_!!Ԁf  g Encryptionf  g f  g Requestf  g  ,| Coordinatorat43mb> O  5  crypt@bis.doc.gov6oOo  7_oԀand44_dO  5  enc@nsa.gov6=pOQp  7_ipԀ,bythetimeofexport,thef  g f  g informationf  g Ԁdescribed  p inparagraphs(a)through(e)ofSupplementNo.6tothispart.*** d    ` f  g (2)>XzXXXzReviewrequirementformassmarketencryptioncommoditiesandsoftware !L exceeding64bits#XzXX>Xz r#.>XzXXXz***Encryptioncommoditiesandsoftwarethataredescribedin740.17(b)(2) #@  oftheEARdonotqualifyformassmarkettreatment#XzXX>Xzr#.***** %4!"   12.Inpart742,SupplementNumber6,reviseparagraphs(c)(8)and(c)(11)toreadas )%& follows: +'( Ї SupplementNo.6topart742!GuidelinesforSubmittingReviewRequestsforEncryption  Items.   *****   (c)*** t    (8)Describethecryptographicfunctionalitythatisprovidedbythirdpartyhardwareor \  softwareencryptioncomponents(ifany).Identifythemanufacturersofthehardwareorsoftware P components,includingspecificpartnumbersandversioninformationasneededtodescribethe D product.Describewhethertheencryptionsoftwarecomponents(ifany)arestaticallyordynamically 8 linked. ,|   *** d   (11)Forproductsthatmeettherequirementsof740.17(b)(3)!Encryptioncommodities, !L softwareandcomponentsavailabletoboth governmentendusersandtonon governmentend #@  users!describehowtheyarenotrestrictedbytheprovisionsof740.17(b)(2). %4!" ***** )%& Ѐ +'(   13.Theauthoritycitationforpart744isrevisedtoreadasfollows:   XzXXXz  Authority: 50U.S.C.app.2401etseq.;50U.S.C.1701etseq.;22U.S.C.3201etseq.;  42U.S.C.2139a;Sec.901911,Pub.L.106387;Sec.221,Pub.L.10756;E.O.12058,43FR   20947,3_!!CFR_!!,1978Comp.,p.179;E.O.12851,58FR33181,3_!!CFR_!!,1993Comp.,p.608;E.O.   12938,59FR59099,3_!!CFR_!!,1994Comp.,p.950;E.O.12947,60FR5079,3_!!CFR_!!,1995Comp., t  p.356;E.O.13026,61FR58767,3_!!CFR_!!,1996Comp.,p.228;#XzXXXzvy#2XzXXXzE.O.13099,63FR45167,3_!!CFR_!!, h  1998Comp.,p.208#XzXX2Xzo|#XzXXXz;#XzXXXz}#2XzXXXzԀE.O.13222,66FR44025,#XzXX2XzY}#XzXXXzԀ3_!!CFR_!!,2001Comp.,p.783;E.O.13224,66FR \  49079,3_!!CFR_!!,2001Comp.,p.786;NoticeofAugust6,2004,69FR48763(August10,2004); P NoticeofNovember4,2004,69FR64637(November8,2004)#XzXXXz}#XzXXXz.#XzXXXz!# XzXXXz D    `  #XzXXXzj#  14.In744.9,reviseparagraph(a)toread: ,|  744.9RestrictionsonTechnicalAssistancebyU.S.PersonswithRespecttoEncryption d Items.   X (a)Generalprohibition. #@  NoU.S.personmay,withoutauthorizationfromBIS,providetechnicalassistance(includingtraining)to '(#$ foreignpersonswiththeintenttoaidaforeignpersoninthedevelopmentormanufactureoutsidethe )%& UnitedStatesofencryptioncommoditiesandsoftwarethat,ifofUnitedStatesorigin,wouldbe +'( controlledfor_!!EI_!!Ԁreasonsunder_!!ECCN_!!Ԁ5A002or5D002.Technicalassistancemaybeexportedand  _!!reexported_!!ԀimmediatelytonationalsofthecountrieslistedinSupplement3topart740oftheEAR  (exceptfortechnicalassistancetogovernmentend-usersforcryptanalyticitems),providedthatthe  XzXXXzexporterhassubmittedtoBISacompletedencryptionreviewrequestbythetimeofexport(as   describedin7#XzXXXz5#XzXXXz40.17(a)f  g (3)#XzXXXz#XzXXXzԀoftheEAR,fortechnicalassistancenototherwiseauthorizedunder   7#XzXXXz]#XzXXXz40.17(a)(1)#XzXXXz#XzXXXzf  g ԀoftheEAR#XzXXXzJ#XzXXXz).NotethatthisprohibitiondoesnotapplyiftheU.S.personprovidingthe t  assistancehasalicenseorisotherwiseentitledtoexporttheencryptioncommoditiesandsoftwarein h  questiontotheforeignperson(s)receivingtheassistance.Noteinadditionthatthemereteachingor \  discussionofinformationaboutcryptography,including,forexample,inanacademicsettingorinthe P workofgroupsorbodiesengagedinstandardsdevelopment,byitselfwouldnotestablishtheintent D describedinthissection,evenwhereforeignpersonsarepresent. 8 *****#XzXXXz#  p   15.Theauthoritycitationforpart772continuestoreadasfollows:  X   XzXXXzAuthority: 50U.S.C.app.2401etseq.;50U.S.C.1701etseq.;#XzXXXz9#2XzXXXzԀE.O.13222,66FR #@  44025,#XzXX2Xzʊ#XzXXXzԀ3_!!CFR_!!,2001Comp.,p.783;NoticeofAugust6,2004,69FR48763(August10,2004).#XzXXXz9# %4!"   16.In772.1,addasentencetotheendofthedefinitionof holdwithoutactiontoreadas )%& follows: +'( Ї 772.1DefinitionsoftermsasusedintheExportAdministrationRegulations(EAR).   *****  HoldWithoutAction(_!!HWA_!!).***Encryptionreviewrequestsmaybeplacedonholdf  g Ԁwithout   actionstatusasprovidedin740.17(d)(2)and742.15(b)(2)oftheEAR. t  Dated \  Peter_!!Lichtenbaum_!! ,| AssistantSecretaryforExportAdministration