WPCe  ]?MԼH}rľ֪N/+m|Gi;L u9.cvL{cA_MH-/RtALjFW|(|J?= @ d=-oO7Dmsтaĕ|]bj|17Yw)R:l6;DŽ%scVU8nw:n2Q759EqTEun6DϗNiN*.|SJ8o« G"m|VupqqѴ#wpʧI}9~O 'Sj&FaCqr{a&+x|s'-4cs~˥GI+;Z$+ᓒޤ,_; qK&Vf}7vNXֺ(K oXd ?#"vE0ȦZUw>' 0R' 0O( 0L) 0I* 0F+ 0C, 0@- 0=. 0:/ 070 0"1 0 2 02 03 04 05 06 07 0 z8 0d9 0N: 08; 0"< 0 = 0= 0> 0? 0n@ 0H"A 0HjA 0HA 0HA 0HBB 0HB 0HB 0HC 0HbC 0@C 0C 0D 0E 0F 0G 0H 0I 0@^J 0J 0K 0L 0M 0rN 0XO 08P 0Q 0Q 0>R 0R 0S 0T 0U 0V 0W 0X 0\Y 0F,Z 0RrZ 0Z 0>[ 0v\ 0v|\ 0v\ 0vh] 0v] 0vT^ 0N^ 0_ 02-` 0_`U6[a 0Ba 0_a 0_2b 0 b 0c 0KeU*f B* g D/7g D+fg 0g B*)i D/Si 0i 0>Pj 0j 0:k 0^k 0<.l 0Fjl 0Nl 1l 0m 72:n 0lnUN!o 0oo 0$p 0p 0q 16ss 0t 0>u 0(u AQvU@lv/%v4vv 0wxxUNyy 1Uy 7 0z 0: B[ Bx B B Bϝ B B B& BC B` B} B B BԞ B B B+ BH Be B B B Bٟ B B B0 BM Bj B B B Bޠ B B B5 BR Bo B B Bơ B B B B: BW Bt B B Bˢ B B B" B? B\ By B B BУ B B B' BD Ba B~ B B Bդ B B B, BI Bf B B B Bڥ B B B1 BN Bk B B B¦ Bߦ B B B6 BS Bp B B Bǧ B B B B; BX Bu B B B̨ B B B# B@ B] Bz B B Bѩ B B B( BE Bb B B B B֪ B B B- BJ Bg B B B B۫ B B B2 BO Bl B B Bì B B B B7 BT Bq B B Bȭ B B B B< BY Bv B B Bͮ B B B$ BA B^ B{ B B Bү B B B) BF Bc B B B Bװ B Aױ 1c 7U H B; 0CXUN 0K B*4 B*^ B B B*´ B B B*& BP B*m B B B*ѵ D/ B* BG Bd B* B B*ȶ B B B, BI Bf B* B B*ʷ B B B. BK Bh B* B B*̸ B B B0 BM Bj B* B B*ι B* B" B? B\ B*y B* 0~ͺK4a(UNF 0QS 0 c#UaN % M(N>^ @wL4Pd mf 1u} 72 0zc$ 0w 0 0 0( 0 0 0~ 0Dm 1 D5< i7qqq 1 723\  `&Times New Roman2P+P 0_level1  , 8.` hp x (#823  ..  8.` hp x (#8  2P+P 0_level2  X 8.` hp x (#823  ..  8.` hp x (#8  2P+P 0_level3   8.4` hp x (#823  ..  8.` hp x (#8  2P+P 0_level4   8.` ` hp x (#823  ..  8.` hp x (#8  2P+P 0_level5   8. ` hp x (#823  ..  8.` hp x (#8  2P+P 0_level6   8. ` hp x (#823  ..  8.` hp x (#8  2P+P 0_level7  4 8. ` hp x (#823  ..  8.` hp x (#8  2P+P 0_level8  ` 8.` hp x (#823  ..  8.` hp x (#8  2P+P 0_level9   8.<` hp x (#823  ..  8.` hp x (#8  2PP 0_levsl1  , 8.` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl2  X 8.` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl3   8.4` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl4   8.` ` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl5   8. ` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl6   8. ` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl7  4 8. ` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl8  ` 8.` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levsl9   8.<` hp x (#823  Ԁ  8.` hp x (#8  2PP 0_levnl1  , 8.` hp x (#823   8.` hp x (#8  2PP 0_levnl2  X 8.` hp x (#823   8.` hp x (#8  2PP 0_levnl3   8.4` hp x (#823   8.` hp x (#8  2PP 0_levnl4   8.` ` hp x (#823   8.` hp x (#8  2PP 0_levnl5   8. ` hp x (#823   8.` hp x (#8  2PP 0_levnl6   8. ` hp x (#823   8.` hp x (#8  2PP 0_levnl7  4 8. ` hp x (#823   8.` hp x (#8  2PP 0_levnl8  ` 8.` hp x (#823   8.` hp x (#8  2PP 0_levnl9   8.<` hp x (#823   8.` hp x (#8  <:Default ParaXXX2  0Level 1    2  0Level 2    2  0Level 3    2  0Level 4    2  0Level 5    2  0Level 6    2  0Level 7    2  0Level 8    2  0Level 9    *  (_17    *U (_16    2(` ` hp x (#2   \RX` hp x (#\  *R| (_15    /% hp x (#/   YOX` hp x (#Y  *Oy (_14   ` ," hp x (#,   VLX` hp x (#V  *Lv (_13    )h hp x (#)   SIX` hp x (#S  *Is (_12    &p x (#&   PFX` hp x (#P  *Fp (_11   h #p x (##   MCX` hp x (#M  *Cm (_10     pp x (#    J@X` hp x (#J  *  (_26    *U (_25    2(` ` hp x (#2   \RX` hp x (#\  *R| (_24    /% hp x (#/   YOX` hp x (#Y  *Oy (_23   ` ," hp x (#,   VLX` hp x (#V  *Lv (_22    )h hp x (#)   SIX` hp x (#S  *Is (_21    &p x (#&   PFX` hp x (#P  *Fp (_20   h #p x (##   MCX` hp x (#M  *Cm (_19     pp x (#    J@X` hp x (#J  *@j (_18     x (#   G=X` hp x (#G  (@j &_9     x (#   G=X` hp x (#G  (  &_8    (U &_7    2(` ` hp x (#2   \RX` hp x (#\  (R| &_6    /% hp x (#/   YOX` hp x (#Y  (Oy &_5   ` ," hp x (#,   VLX` hp x (#V  (Lv &_4    )h hp x (#)   SIX` hp x (#S  (Is &_3    &p x (#&   PFX` hp x (#P  (Fp &_2   h #p x (##   MCX` hp x (#M  (Cm &_1     pp x (#    J@X` hp x (#J  &@j $_     x (#   G=X` hp x (#G  0  .Normal    <  :Definition T    <Oy :Definition L  , 8.` hp x (#8   bXX` hp x (#b86Definition('' &H1     XXX ('' &H2     XXX ('' &H3     XXX ('' &H4  XXX   XXX('' &H5     XXX ('' &H6     XXX 2 0Address    8X 6Blockquote  , , 5+ ` hp x 5    bXX` hp x (#b,*CITE,dl*CODEKP<6X9`(Courier NewKXXXS\  `&Times New RomanS<6X9`(Courier New<:WP9_Emphasis<:WP9_Hyperlin    <:FollowedHype    4go2KeyboardKP<6X9`(Courier NewK XXXS\  `&Times New RomanS < :Preformatted  KP<6X9`(Courier NewK2(  +Kk $#(#2  \RX` hp x (#\XXXS\  `&Times New RomanS: 8zBottom of   ?W%2A`Arial?7Y(X7    7Z(X7  XXXS\  `&Times New RomanS%2A`Arial& d dX)1dxd'dxd: 8zTop of For  ?W%2A`Arial?7](X7    7Z(X7  XXXS\  `&Times New RomanS& d d\)2dxd0KS.SampleKP<6X9`(Courier NewKS\  `&Times New RomanS86WP9_Strong 8dl6TypewriterKP<6X9`(Courier NewKXXXS\  `&Times New RomanS42Variable: 8HTML MarkupB      2 0CommentB  0  .Style0    (O$(EhCEKQW]cioAutoList21.1.1.1.1.1.1.1.(2$ ך!..      X"5XXXX"5XXX"5  f1.(2$ ך!..      X"5XXXX"5XXX"5  (hH  Z 6Times New Roman Regular(2$ ך!..      X"5XXXX"5XXX"5  <CCDS:QuickFormat5E%%%    E%%%    (2$ ך!..      X"5XXXX"5XXX"5  <:QuickFormat1%%%]E+ON  0Times New Roman Bold]          %%%]E+ON  0Times New Roman Bold]          0CEMU]emu}AutoList1(i)(i)(i)(A)(i)(i)(i)(i) Level 1 Level 2 Level 3 Level 4 Level 5(2$ ך!..      X"5XXXX"5XXX"5  (2$ ך!..      X"5XXXX"5XXX"5  ($pqrsZC<< c'n2 Z(Times New Roman #$SJCSCookmailto:cpratt@bis.doc.gov<``D":QuickFormat6E%%%%E%%%%   E%%%%E%%%%   Level 1Level 2Level 3Level 4Level 5Level 1Level 2Level 3Level 4Level 5 6Times New Roman Regular(359=AEIMQ1!!!!!!!!~!42EmphasisLevel 1Level 2Level 3Level 4Level 564Hyperlink     d d d d d d d d d d d d d d)3dxd d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d<:zBottom of 7Y(X7  ?W%2A`Arial?  S\  `&Times New RomanS7Z(X7<:zTop of For7](X7  ?W%2A`Arial?  S\  `&Times New RomanS7Z(X70.Strong  d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d d dLevel 1Level 2Level 3Level 4Level 5zrIZ&OLE 2.0 Box <=8C HKKKK 35;AGMQW]21.1.1.1.C1.1.1.C1.+ON  0Times New Roman Bold d($    (ON  Z 6Times New Roman Regular( $ Figure  1  & d d& d d d d& d d d d& d d d& d d d d& d dW)4dxd d d d& d d d& d d d d d d d& d d d& d d d d d d d& d d d& d d d d d d d& d d d& d d& d d d d d& d d& d dV& 8Document[8]Document Style0..8` ..`  e  subchapterBormanmailto:enc@nsa.gov.(hH  Z6Times New Roman Regularmailto:publiccomments@bis.doc.gov.(2$ ך!..      X"5XXXX"5XXX"5  "5XXX"5  0  #|x(rך$..      X*UXXXX*UXXX*UHP LaserJet 4000 Series PCL$,,,,$0(9 Z6Times New Roman RegularXC9s b8:i+00TU3#37=CIQYag1.a.i.(1)(a)(i)1)a)i)(;3$2#  0  .3  0  (O;$0  2#  a  .3  0` (#(#(b$0  0` (#(#2#   .3  0 ` (#` (#(xir$0  0` (#(#0 ` (#` (#2#(  0  )3  0 (# (#($0  0` (#(#0 ` (#` (#0 (# (#2#(  a  )3  0h(#(#(F$0  0` (#(#0 ` (#` (#0 (# (#0h(#(#2#(   )3  0h(#h(#($0  0` (#(#0 ` (#` (#0 (# (#0h(#(#0h(#h(#2#  0  )3  0(#(#({$0  0` (#(#0 ` (#` (#0 (# (#0h(#(#0h(#h(#0(#(#2#  a  )3  0p(#(#(F$0  0` (#(#0 ` (#` (#0 (# (#0h(#(#0h(#h(#0(#(#0p(#(#2#     )3  0p(#p(# x"|Icgkosw{Large BulletLarge Bullet)!dxdx-%8 CSY_ekqw}Numbers 2Numbers1.1.1.1.1.1.1.1.1. ך!..      X1XXXX1XXX1  _81XXdd8~O(6(#BillingCode:351033   hX       P        X   (#(#K(#ӈ DEPARTMENTOFCOMMERCE  X    (      `    0      b        P        X BureauofIndustryandSecurity   J @* 15CFRParts732,734,738,740,742,744,746,748,750,762,770,772and774           P        X    (   [DocketNo.0802111638122401]  *z   RIN0694AE18    EncryptionSimplification  Z  AGENCY: BureauofIndustryandSecurity,Commerce. B  ACTION: 󀀀Interimf  g Finalf  g Rule    SUMMARY: Thisinterimf  g finalf  g ruleamendstheExportAdministrationRegulations(EAR)to "$r# makethetreatmentofencryptionitemsmoreconsistentwiththetreatmentofotheritemssubject %>!% totheEAR,aswellastosimplifyandclarifyregulationspertainingtoencryptionitems.The ' #' restrictionspertainingtotechnicalassistancebyU.S.personswithrespecttoencryptionitems )$) areremoved,becausethecurrentexportandreexportrestrictionssetforthintheEARfor R+&+ technologyalreadyincludetechnicalassistance.ThisrulealsoremovesLicenseExceptionKMI  asithasbecomeobsoletebecauseofdevelopmentsinusesofencryption.Inaddition,thisrule | removesnotificationrequirementsforitemsclassifiedas5A992,5D992,and5E992.f  g Thisrule H alsoincreasescertainparametersunderLicenseExceptionENC,whichisintendedtoreflect  d advancesintechnology.f  g f  g Tf  g hisrulef  g f  g addstwonewreviewandreportingrequirementexclusion  0 paragraphsunderLicenseExceptionENCforwireless personalareanetworkitemsandfor     ancillarycryptographyitems.ThisrulealsoaddsBulgaria,Canada,Iceland,Romania,and x  TurkeytothelistofcountriesthatreceivefavorabletreatmentunderLicenseExceptionENC.f  g Ԁ D  Commoditiesandf  sg f  g oftwarependingmassmarketreviewmaynolongerbeexportedunder , ECCNs5A992and5D992usingNoLicenseRequired(NLR).However,oncethemassmarket  reviewhasbeenreceivedbyBIS,thensuchcommoditiesandsoftwaremaybeexportedusing t LicenseExceptionENCunderECCNs5A002and5D002. @ f  g Thisrulewillreducethepaperworkburdenonthepublicby9%(annualdollaramountsavings ( ofapproximately$14,000tothepublicand$5,000totheU.S.Government)f  g ,f  g Ԁbecauseofthe  removalofcertainnotificationrequirements,additionofcountriestothelistofthosereceiving p!  favorabletreatmentunderLicenseExceptionENC,andtheincreaseofreportingandreview <#" requirementexclusions. %X $ TheDepartmentsofCommerce,Statef  g ԀandDefensewillcontinuetoreviewf  g f  g exportcontrol, (#( licensereviewpolicies,andlicenseexceptionsforf  g ԀencryptionitemsintheEAR. l*%*  8,',  DATES: EffectiveDates:Thisruleiseffective[INSERTDATEOFPUBLICATION]  jXvXXX1 ADDRESSES: Writtencommentsonthisinterimf  g finalf  g rulemaybesentbyemailto V 4 eO  5  publiccomments@bis.doc.gov.6ZeOn  7 \ԀInclude Encryptionruleinthesubjectlineofthemessage. 8  CommentsmayalsobesubmittedbymailorhanddeliverytoSharronCook,OfficeofExporter  b Services,RegulatoryPolicyDivision,BureauofIndustryandSecurity,Departmentof  <  Commerce,14thSt.&PennsylvaniaAvenue,N.W.,Room2705,Washington,D.C.20230,   ATTN:Encryptionrule;orbyfaxto(202)4823355.#X1XXjXv#     FORFURTHERINFORMATIONCONTACT: 󀀀Forquestionsofageneralnaturecontact F SharronCook,OfficeofExporterServices,RegulatoryPolicyDivisionat(202)4822440orE b Mail:scook@bis.doc.gov. . Forquestionsofatechnicalnaturecontact:TheInformationTechnologyDivision,Officeof v NationalSecurityandTechnologyTransferControlsat2024820707orEMail:C.Randall B Prattat4w eO  5  cpratt@bis.doc.gov6leO  7 < .  ^  SUPPLEMENTARYINFORMATION  r% $  Background   )Z$(  StepsRegardingScopeoftheEAR  X    (      `    0  *&&* Thisrulerevisesparagraph732.2(b)oftheEAR,whichsetsforthinstructionsonhowto  determineifyourtechnologyorsoftwareispubliclyavailable,byaddingHX1XXX1massmarket | encryptionsoftwarewithsymmetrickeylengthexceeding64bitsclassifiedunderECCN5D992#X1XXHX1#. H Theadditionofthisphraseharmonizesf  g withthescopeofpubliclyavailableencryptionsoftware  d thatisconsideredtobesubjecttotheEARbecauseofthecriteriasetforthin734.3(b)(3)ofthe  0 EAR.     ItemsSubjecttotheEAR  D  Thisruleaddsanotetoparagraph734.3(a)(4)oftheEAR,whichsetsforththeitemsthatare ` subjecttotheEAR.Thenoteremindsreadersthatcertainforeignmanufactureditemsaresubject , totheEARwhendevelopedorproducedfromU.S.originencryptionitemsthatwereexported  pursuantto740.17(a)ofLicenseExceptionENC. t  ClarificationofText         \ Thisrulereplacesthephrase encryptionsoftware(includingsourcecode)transferredfromthe ( U.S.MunitionsListtotheCommerceControlListconsistentwithE.O.13026ofNovember15,  1996(61FR58767)andpursuanttothePresidentialMemorandumofthatdatewith software p!  controlledfor EIreasonsunderECCN5D002ontheCommerceControlListtoclarifywhich <#" softwarethissentenceisreferringtointheintroductoryparagraphofSupplementNo.1topart %X $ 734 QuestionsandAnswerTechnologyandSoftwaresubjecttheEAR. &$"&  DeterminingWhetheraLicenseisRequired  l*%* Thisruleclarifiestextin738.4(a)(1)oftheEARthatnotalllicenserequirementssetforth 8,', underthe LicenseRequirementssectionofanECCNrefertotheCommerceCountryChart,  butinsomecasesthissectionwillcontainreferencestoaspecificsectionintheEARthat | containlicenserequirementsforthatparticularECCN.Insuchcases,youcouldnotdetermine H whetheralicenseisrequiredbasedontheECCNandCountryChartaloneandsection  d 738.4(a)(1)oftheEARwouldnotapply.Forexample, EIcontrolsarenotincludedinthe  0 CountryChart;howeverlicensingrequirementsfor EIcontrolleditemsareincludedin    742.15(a)oftheEAR.Inaddition,thisruleremovesthereferencein738.4(a)(2)(ii)(B)to x  notificationrequirementsdescribedinparagraph742.15(b)foritemsclassifiedunderECCNs D  5A992,5D992,and5E992,becausethisruleremovesnotificationrequirementsfortheseitems. ` Thisrulealsoclarifiesthereminderaboutthereviewrequirementsforcertainmassmarket , encryptionitemsunderECCNs5A992and5D992,byremovingthereferenceto5E992and  harmonizingthecitationreferencewiththechangesinthisrule. t  LicenseExceptionLVS   \ Thisrulerevises740.3(d)(5)toclarifythatnotonlyexports,butreexportsofencryption ( componentsorsparepartsaresubjecttothespecialrestrictioninthisparagraph.Inaddition,the  term itemhasbeenreplacedbycorrectterminology. p!   LicenseExceptionKMI  %X $ Thisruleremoves740.8oftheEAR LicenseExceptionKMIasithasbecomeobsolete &$"& becauseofthedevelopmentsintheuseofencryption.Aconsequentialrevisionisalsomadeto (#( 746.3(c)oftheEAR,whereLicenseExceptionKMIwaslisted.Productspreviouslyeligiblefor l*%* LicenseExceptionKMIwillbeaccordedequivalenttreatmentunderlicenseorlicense 8,', exception.Asaresultofthischange,thisrulealsoremovesSupplementNo.4topart742 Key  EscroworKeyRecoveryProductsCriteria. |  LicenseExceptionTSU   d In740.13(d)oftheEAR,thisruleremovesthequotationmarksaroundtheterm massmarket  0 inthetitletoparagraph(d),paragraph(d)(1),footnote1,paragraph(d)(3)(i)andparagraph    (d)(3)(ii),becauseintheEARdoublequotationmarksaroundatermindicatethatthewordis x  definedinpart772oftheEAR,andmassmarketisnotadefinedterminpart772oftheEAR. D    ̚ LicenseExceptionENC   Thisrulerevises740.17oftheEARbyreformattingparagraphs,removingredundanttext,and t clarifyingtextasneeded.Thisrulerevisesthetitleofthissectiontoindicatethatthislicense @ exceptionalsoauthorizestechnology.Theintroductoryparagraphto740.17oftheEARis  \ condensedtosetforththescopeof740.17oftheEARandincludeinformationnotfound ( elsewherein740.17oftheEAR.  Whilethisrulereformatstheparagraphsin740.17oftheEAR,itwasBIS'sgoaltominimize <#" revisionstotheenumerationofparagraphsusedtoclassifyencryptionitemsinthepast,soasto %X $ alleviateconfusionaboutpreviousclassificationsprovidedbyBISthatreferencespecific &$"& paragraphsandtoreducethenumberofrevisionstoindustry'scurrentproductmatrices.That (#( beingsaid,theparagraphtitleshavebeenrevisedtoreflectreviewrequestrequirementsinstead l*%* ofdestinations,enduses,ortypesofendusers. 8,', ЇThisruleremovesparagraphs740.17(a)(2)and(b)(2)(i)thatexemptedcommoditiesand  softwarefromreviewrequirementsbasedonapreviousreviewbytheU.S.Governmentpriorto | October19,2000.Thesecommoditiesandsoftwareremainexemptfromreviewrequirements, H andBISdidnotseethenecessityofretainingsuchtextintheExportAdministration  d Regulations.  0   Paragraph740.17(a)nowdescribesexportsandreexportsauthorizedbyLicenseExceptionENC x  thatdonotrequirepriorgovernmentrevieworpostexportreporting.Theformerparagraph D  (a)(2) ItemspreviouslyreviewedbytheU.S.Governmentisremovedbythisrule,asthis ` paragraphisnolongernecessarybecauseofthepassageoftime.Formerparagraph(a)(3)for , endusesotherthaninternaldevelopmentismovedtonewparagraph(b)(1),becauseareview  requestsubmissionisrequiredforeligibilityunderthisparagraph.Formerparagraph(b)(1)for t U.S.subsidiariesismovedto(a)(2),becauseauthorizationunderthisparagraphdoesnotrequire @ priorreview.Inaddition,thisruleamendsformerparagraph(b)(4)(i)(A)(exemptingencryption  \ itemsnotexceedingcertainkeylengthsfromthe30daywaitingperiod)bymovingitto ( (b)(1)(ii)(A).   740.17(a)(1)  <#" Thisruleremovesreferencesinparagraph740.17(a)(1)to technicalassistancedescribedin %X $ 744.9oftheEAR,becausethisruleremovesf  g f  g 744f  g .9,seeexplanationsetforthbelowunder &$"&  744.9.Thisruleclarifiestextinparagraph(a)(1)sothatitisunderstoodthatLicense (#( ExceptionENCcanbeusedfornotonlyinternaldevelopment,butalsointernalproductionof l*%* newproducts. 8,', Їf  740.17(a)(2)   Paragraph740g f  g .17(a)(2) f  V  g f  W:g isformerparagraph(b)(1). |  740.17(b)   d Paragraph740.17(b)nowsetsforththoseitemsauthorizedunderLicenseExceptionENCthat  0 requirepriorreviewbytheU.S.Government.Thisparagraphalsosetsforththe open    cryptographicinterfacerestrictionthatappliestoallparagraphsin740.17(b),exceptfor x  paragraph740.17(b)(1)(i).Thisintroductoryparagraphalsosetsforththerestrictiontoexport D  orreexportcryptanalyticitemstoany governmentenduser.Thereisalsoareferenceinthis ` paragraphtoparagraph(e) reportingrequirementsforexportsandreexportsunder740.17(b). ,  740.17(b)(1)  t Thenewparagraph740.17(b)(1)oftheEARauthorizesexportsandreexportsunderLicense @ ExceptionENCthatrequirepriorgovernmentreview,butallowstheexportorreexporttotake  \ placeimmediatelyuponregistrationofthereviewrequestwithBIS. ( Paragraph(b)(1)(i)authorizesHX1XXX1Ԁtheexportandreexportofencryptionitems,includingEI p!  controlledcommoditiesorsoftware(excludingsourcecode)thatarependingreviewformass <#" markettreatment(under742.15(b)oftheEAR),#X1XXHX1t?#HX1XXX1Ԁto"governmentend-users"and %X $ non-"governmentend-users"locatedinthecountrieslistedinSupplement3ofpart740,aswell &$"& astoforeignsubsidiariesorofficesoffirms,organizationsandgovernmentsheadquarteredin (#( countrieslistedinSupplement3ofpart740.#X1XXHX1@#ԀThisruleaddsauthorizationunderLicense l*%* ExceptionENCforitemspendingmassmarketreview,becauseitwasnotlogicaltotemporarily 8,', classifycommoditiesandsoftwareunderECCNs5A992or5D992thatwerependingmass  marketreviewunderparagraph742.15(b)andauthorizeexportorreexportunderthedesignation | of NoLicenseRequired(NLR)whenthepossibleoutcomeoftheBISclassificationofthe H commoditiesandsoftwarecouldbeECCN5A002or5D002.  d Newparagraph740.17(b)(1)(ii)authorizesexportsandreexportsofspecifiedencryption    commoditiesandsoftwaretocountriesnotlistedinSupplementNo.3topart740.Thisrule x  revisestheformatoftheparametersinthissectionfromarangetoanupperlimitinparagraph D  (b)(1)(ii)(A),formerparagraph(b)(4)(i)(A).Inaddition,theupperlimitforsymmetric ` algorithmshasbeenraisedfrom keylengthsnotexceedingf  64bitsg f  g Ԁto keylengthsnot , exceeding80bits.Afterreviewhasbeencompletedonthesecommoditiesorsoftware,BIS  willissueaCCATSthatwillindicateauthorizationisunderparagraph(b)(2)or(b)(3)of t 740.17oftheEAR,whicheverparagraphisappropriate. @ Paragraph(b)(1)(ii)(B),formerparagraph(b)(4)(i)(B),authorizesexportsandreexportsof ( encryptionsourcecodethatwouldnotbeeligibleforexportorreexportunderLicenseException  TSU,providedthatacopyofthesourcecodeisincludedinthereviewrequest,to p!  non-"governmentend-users"locatedinanycountryexceptacountrylistedinCountryGroup <#" E:1ofSupplementNo.1topart740oftheEAR.Afterthereviewhasbeencompleted,BISwill %X $ issueaCCATSthatwillindicateauthorizationisunderparagraph740.17(b)(2)oftheEAR.The &$"& textisclarifiedbyreplacingthephrase consideredpubliclyavailablewith eligibleinorder (#( toavoidconfusionaboutthescopeofencryptionsourcecodeeligibleunderthisparagraph.d 8" d l*%*  8,', f  X  ԍ Yg 740.17(b)(2)  Paragraph(b)(2)ofLicenseExceptionENCauthorizesexportsandreexportstonon |  governmentendusersX1XXX1locatedinacountrynotlistedinSupplementNo.3tothispartor H CountryGroupE:1#X1XXX1L#Ԁthatrequireapriorreviewand30daywaitingperiod.Pursuanttothenew  d scopeparagraph740.17(b),thisruleexpandsthescopeof(b)(2)toincludeECCN5B002tobe  0 consistentwithcommoditiesandsoftwareeligibleforLicenseExceptionENCunderparagraphs    (b)(1)and(b)(3)oftheEAR.Inaddition,formerparagraph(b)(2)(i)concerningtransactions x  previouslyreviewedpriortoOctober19,2000bytheU.S.Governmentisremovedasthe D  passageoftimehasmadethisparagraphunnecessary.Formerparagraph(b)(2)(ii)thatsetforth ` thereviewrequestrequirementisremoved,asthereviewrequestrequirementhasbeenmovedto , theintroductorytextofparagraph(b)(2).Formerparagraph(b)(2)(iii)isreplacedbythe  introductorytextofparagraph(b)(2). t Thisrulerevisesf  g newparagraph(b)(2)(g f  g if  g )f  g ,f  g Ԁ(Networkinfrastructuresoftwareandcommodities)f  g Ԁby  \ adding digitalpackettelephony/media(voice/video/data)overinternetprotocoltothelistof ( capabilitiesdescribed.    Alsointhisnewparagraph(b)(2)(i),theformerparagraph(b)(2)(iii)(A)f  g Ԁreferenceto"64bitsfor <#" symmetricalgorithms"ischangedto"80bitsforsymmetricalgorithms",commensuratewiththe %X $ keylengthchangeinnewparagraph(b)(1)(ii)(B).(Note:Regardingkeylengthwithrespectto &$"& theauthorizationsandrestrictionssetforthinboththecurrentandformerversionsofLicense (#( ExceptionENC740.17(b)(2),only'networkinfrastructure'commoditiesandsoftware l*%* (sub-paragraph(i)inthisrule)aredistinguishedbykeylength.Allencryptioncommoditiesand 8,', softwarenowenumeratedinsub-paragraphs(ii)-(vi)(formersub-paragraphs(iiii)(B)-(iii)(F))of  LicenseExceptionENCparagraph(b)(2)arecontrolledto"governmentend-users"asdescribed, | regardlessofkeylength.) H f  g f  g Ff  g ormerparagraph(b)(2)(iii)(A)(1),f  g Ԁnewparagraph740.17(b)(2)(i)(A)f  g Ԁisclarifiedbythisruleto  0 addquotesaroundtheterm governmentenduser(s)andnowreadsasfollows, Been    designed,modified,adaptedorcustomizedfor governmentenduser(s)orgovernmentenduse x  (e.g.,tosecuref  g f  g f  g police,f  g Ԁstatesecurityf  g ,oremergencyresponsef  g Ԁcommunications). D  ̀Thisrulefurtherrevisesf  g formerparagraph(b)(2)(iii)(A)(1f  g ),newparagraph(b)(2)(i)(Af  g ),which , addressesaggregateencryptedWAN,MAN,VPNorbackhaulthroughput,byincreasingthe  parameterfrom44Mbpsto90Mbps. t Thisrulefurtherrevisesf  g formerparagraph(b)(2)(iii)(A)(2f  g ),newparagraph(b)(2)(i)(Bf  g ).The  \ Wire(line),cableorfiberopticWAN,MANorVPNsinglechannelinputdatarateisrevised ( from 44Mbpsto 154Mbps.  Theserevisionsarenotexpectedtoresultinadecreaseinthenumberoflicenseapplications <#" submittedforexportsandreexportsofitemsdescribedinparagraph(b)(2)togovernmentend %X $ users.Mostnetworkinfrastructureitemscurrentlybeingexportedtogovernmentenduses &$"& exceedtheseperformanceparameters.However,BIShasdeterminedthattheparametersshould (#( beadjustedinrecognitionoftechnologyadvances,andtoavoidmaintainingcontrolsonlegacy l*%* systems. 8,', ЇThisrulereplacesthe Maximumnumberofconcurrentencrypteddatatunnelsorchannels...  parameterinf  g formerparagraph(b)(2)(iii)(A)(3),f  g Ԁnewparagraph(b)(2)(i)(C)f  g Ԁwith Media | (voice/video/data)encryptionorcentralizedkeymanagementsupportingmorethan250 H concurrentencrypteddatachannels,orencryptedsignalingtomorethan1,000endpoints,for  d digitalpackettelephony/media(voice/video/data)overinternetprotocolcommunications.  0 TheseamendmentsupdatetheseprovisionsofLicenseExceptionENCtoreflectadvancesin    encryptiontechnology.Specifically,theseamendmentsaddresscryptographicdevelopmentsin x  DatagramTransportLayerSecurity(DTLS)-SecureReal-TimeTransportProtocol(SRTP),and D  encryptedcommunicationssignaling,forlargeVoiceoverInternetProtocol(VoIP)network ` infrastructures. , Thisrulealsorevisesf  g formerparagraph(b)(2)(iii)(A)(4)(if  g ),newparagraph(b)(2)(i)(D)(1f  g ),which t addressesAirinterfacecoveragecapabilities,bychanging maximumdataratesto maximum @ transmissiondataratesandchangingtheparameterfrom 5Mbpsto 10Mbps.Bylimiting  \ thisLicenseExceptionENCprovisiontothetransmit(upstream)dataratesanddoublingthe ( licensingthreshold,theseamendmentsreflecttechnologydevelopmentsforcertainsatelliteand  otherlong-rangewirelessdevices. p!  Formerparagraph(b)(2)(iii)(B)thataddressedencryptionsourcecodethatwouldnotbeeligible %X $ forexportorreexportunderLicenseExceptionTSUismovedtonewparagraph(b)(2)(ii),but &$"& alsoappearsinnewparagraph(b)(1)(ii)(B)forreviewrequeststhatincludeacopyofthesource (#( code,andmaybeexportedorreexportedwithoutawaitingperiodunderLicenseExceptionENC l*%* whenthereviewrequestisregisteredwithBIS. 8,', Їf  g f  g Ff  g ormerparagraph(b)(2)(iii)(C),f  g Ԁnewparagraph(b)(2)(iii)f  g Ԁisrevisedbyremovingthereference  totheopencryptographicinterfacerestriction,becausethisrestrictionisnowplacedinthe | introductorytextofparagraph740.17(b). H f  g f  g Ff  g ormerparagraph(b)(2)(iii)(C)(1),f  g Ԁnewparagraph(b)(2)(iii)(A)f  g Ԁisamendedbyrevisingthe  0 phrase Beenmodifiedorcustomizedfortoread HX1XXX1beendesigned,modified,adaptedor    customizedfor#X1XXHX1_j#.Quoteshavebeenaddedaroundtheterm governmentenduser(s)toindicate x  thatthistermisdefinedinpart772oftheEAR. D  Thisrulealsorevisesthephrase tosecuredepartmental,police,statesecurity,oremergency , responsecommunicationstoread tosecurepolice,state,security,oremergencyresponse  communications,includingencryptioncommoditiesandsoftwareforexternalSecurity t OperationsCenter(SOC)/NetworkOperationsCenter(NOC)commandandinfrastructure,and @  digitalforensics/computerforensics.Withthisclarification,thisruleprovidesexamplesof  \ threesuchsystemsthatarecontrolledfortheirinherentgovernmentenduse:ExternalSecurity ( OperationsCenter(SOC)/NetworkOperationsCenter(NOC)commandandinfrastructure;  publicsafetyradio(e.g.,implementingTerrestrialTrunkedRadio(TETRA)and/orAssociation p!  ofPublicSafetyCommunicationsOfficialsInternational(APCO)Project25(P25)standards); <#" anddigitalforensics/computerforensics.f  g  %X $  Note: Regardingtheuseofencryptionbyacomputerforensics/digitalforensicscommodityor (#( software(e.g.,forsecuringthecollection,examination,and/orreportingofdataormetadataon l*%* aninvestigatedcomputer),suchdigital/computerforensicstoolswouldnotbeconsidered 8,', "cryptanalyticitems"iftheonlyuseof"cryptography"isforencryption.However,suchtools  thatalsoperform'cryptanalysis'(e.g.,crackingpasswordsoremployingothercryptanalytic | techniquestoderiveuser-encrypteddataormetadatafromacomputerornetwork)wouldbe H controlledas"cryptanalyticitems."  d f  Newparagraph(b)(2)(v),ff  g ormerparagraph(b)(2)(iii)(E),f  g Ԁnewparagraph(b)(2)(v)f  g Ԁisrevisedby    addingaclarifyingphraseaftertheterm quantumcryptographytoread asdefinedinECCN x  5A002oftheCommerceControlList. D  f  g f  g Ff  g ormerparagraph(b)(2)(iii)(F),f  g Ԁnewparagraph(b)(2)(vi)f  g Ԁisrevisedbyreplacingtheterm ,  controlledwith classifiedundertoclarifythescopeofcomputersinthisparagraph.   740.17(b)(3)  @ Thisrulerevisesparagraph740.17(b)(3)oftheEARforexportorreexportofcommoditiesand  \ softwarenotlistedin740.17(b)(2)oftheEARbyboth governmentendusersandnon (  governmentendusersbyremovingtheredundantformerparagraph(b)(3)(ii)(B)that  explainedthereviewproceduresandinsteadinsertingareferencetoparagraph740.17(d)that p!  setsforththeseprocedures.Inaddition,formerparagraph(b)(3)(ii)(A)concerningtransactions <#" previouslyreviewedbytheU.S.Governmentisremovedasthepassageoftimehasmadethis %X $ paragraphunnecessary.Formerparagraph(b)(3)(i)(A)thatsetforththeineligibilityof &$"& commoditiesandsoftwarethatprovidean opencryptographicinterfaceisremovedbecause (#( thisrestrictionissetforthintheintroductorytextofparagraph740.17(b).Thisruleaddstext l*%* thatclarifiestheeligiblelocationsoftheendusers,because740.17(a)addressesallexportsto 8,', SupplementNo.3countries.Thisrulerelocatestherestrictioninformerparagraph(f)(1)  concerning cryptanalyticitemstotheintroductorytextofparagraph(b)(3). |  740.17(b)(4)  d  Formerparagraph740.17(b)(4)(i),settingforthcommoditiesandsoftwarethatareeligiblefor  0 exportimmediatelyuponregistrationofareviewrequest,ismovedtonewparagraph(b)(1)(ii).    Inaddition,previousparagraph740.17(b)(4)(ii),settingforthexclusionsfromreview x  requirementsforcertainitems,isreformattedasparagraph740.17(b)(4). D  Formerparagraph(b)(4)(ii)(A)forshortrangewirelessencryptionisnowinnewparagraph , (b)(4)(i).Thisruleaddsexamplestothisparagraphofshortrangewirelesscommoditiesand  software.Aninformativesentenceisalsoaddedtonotifythereaderthatcertainitemsexcluded t bythisparagraphmayalsobeexcludedfromreviewunder(b)(4)(iii)(personalareanetworks)or @ (b)(4)(iv)(commoditiesandsoftwarethatprovide"ancillarycryptography").  \ Formerparagraph(b)(4)(ii)(B)isreplacedbythethird,fourth,andfifthsentencesofformer  paragraph(c),whichpertainstoforeignproductsdevelopedwithorincorporatingU.S.origin p!  encryptionsourcecode,components,ortoolkits. <#" Thisruleaddstwonewreviewrequirementexclusionparagraphs.Thefirstnewparagraph &$"& (b)(4)(iii)isforwireless personalareanetworkitems.Thisruleaddstheterm personalarea (#( networkanddefinition,aswellasexamplestopart772.Theothernewexclusionparagraph l*%* (b)(4)(iv)isfor ancillarycryptography,whichisalsoanewlyaddedterm/definitioninpart 8,', 772.Theterm/definitionincludesexamplesof ancillarycryptography.TheUSGovernment  hasdeterminedthatitisnotnecessarytoreviewtheencryptionfunctionalityofsuchitems. |   Reexportsandtransfers   d Thisruleclarifiesthesecondsentencein740.17(c)oftheEAR(restrictedtransfers)byadding  0 quotesaroundtheterm governmentendusersforconsistency.Thethirdandforthsentences    inthissectionconcerningforeignproductsdevelopedwithorincorporatingU.S.origin x  encryptionproductsaremovedtonewparagraph(b)(4)(ii),becauseitwasmisplacedand D  redundanttotextalreadyincludedinanotherparagraphofLicenseExceptionENC. `  Reviewrequestprocedures   Thisruleremovesformerparagraph(d)(1) Instructionsforrequestingreviewbecausethese t instructionswereredundantandinconsistentwiththeinstructionsforsubmissionsonFormBIS @ 748P(MultipurposeApplication)foundinPart748oftheEAR.Instructionsforsuch  \ submissionsbelonginPart748oftheEAR. ( Thisrulereformatsformerparagraph(d)(2) ActionbyBISbecausethisparagraphwasentirely p!  toolongandneededtobedividedbysubjectmatter.Thenewsubparagraphtitlesare:(i) <#" Notification;(ii)After30days;and(iii)HoldWithoutAction(HWA). %X $ Thisrulemovesformerparagraph(d)(3), f  g f  g kf  g eylengthincreases,tothereportingrequirement (#( sectionundernewparagraph(e)(2),becausethisrequirementisinactualityareporting l*%* requirementandnotareviewrequirement.Thisreportisrequiredforcommoditiesandsoftware 8,', that,afterhavingbeenreviewedandauthorizedforLicenseExceptionENCbyBIS,are  modifiedonlytoupgradethekeylengthusedforconfidentialityorkeyexchangealgorithms. | Thisrulealsomakesthenewkeylengtharequiredelementofthereport. H   Reportingrequirements   0 ThereportingrequirementsforLicenseExceptionENCarenowsplitintotwosections:    Semiannualreportingrequirementandreportingkeylengthincreases.Thisruleclarifiesthatthe x  CommodityClassificationAutomatedTrackingSystem(CCATS)numberisarequiredelement D  ofthereport.Thisruleremovesformerparagraph(e)(2)(iv),whichrequiredareportforexports ` ofECCN5E002itemstobeusedfortechnicalassistancethatarenotreleasedby744.9,because , thisruleremovedsection744.9oftheEAR.Thisrulealsoclarifiesthepurposeandscopeof  paragraph(e)(3),regardingreportableinformationonforeignmanufacturersandproductsthat t useencryptionitemsincountriesnotlistedinSupplementNo.3topart740. @  Reportingexclusions  ( Thisrulerevisestheexclusionsetforthinformerparagraph(e)(4)(i),newparagraph  (e)(1)(iii)(A),byremovingthereferencetoparagraph(b)(1),because(b)(1)didnotrequireprior p!  revieworpostexportreporting,thereforethisrulemoved(b)(1)tonewparagraph(a)(2). <#" Innewparagraph(e)(1)(iii)(F),thisruleexpandstheexclusionthatwasinformerparagraph &$"& (e)(4)(vi)forcomponentslimitedtoprovidingshortrangewirelessencryptionfunctions,by (#( makingthereportingexclusionapplytoalloftheitemsinthenewparagraph(b)(4),whichare l*%* thoseitemsthatareexcludedfromreviewrequirements(certaincommoditiesandsoftwarethat 8,', provideshortrangewireless;foreignproductsdevelopedwithorincorporatingU.S.origin  encryptionsourcecode(thathavenotenteredUnitedStatesforsubsequentexport),components, | ortoolkits;wireless personalareanetworkitems;and ancillarycryptographycommodities H andsoftware).  d Lastly,innewparagraph(e)(1)(iii)(J),thisruleaddsanewprovisiontoexcludefromreporting    requirementsexportsofitemsthathavebeendetermined,onacasebycasebasisdonotrequire x  theburdenofsemiannualreporting.Certainexportsofitemsthatdonotqualifyformass D  markettreatment,butareauthorizedunderLicenseExceptionENCarenotofinterestfor ` nationalsecurityreasons,thereforedonotwarrantreportingrequirements.Exporterswillbe , notifiedofthisexclusiononissuedCommodityClassificationAutomatedTrackingSystem  (CCATS)documents. t ̀ Restrictions   \ Formerparagraph740.17(f) Restrictionsisremoved,becausetherestrictionsthatwereinthis ( paragraphareintegratedintotheintroductoryparagraphto740.17orspecificparagraphsfor  whichtheyapply. p!   SupplementNo.3topart740  %X $ ThisrulerevisesthetitleofSupplementNo.3topart740toread LicenseExceptionENC &$"& FavorableTreatmentCountries,becausetheformertitleof CountriesEligibleforthe (#( Provisionsof740.17(a)isnolongercorrect,asthesecountriesarenoweligibleforprovisions l*%* of740.17(b)(1)oftheEAR.ThisruleaddsBulgaria,Canada,Iceland,Romania,andTurkeyto 8,', thelistofcountriesinSupplementNo.3topart740oftheEAR.BulgariaandRomaniajoined  theEuropeanUnionbyaccessiononJanuary1,2007.TheadditionofCanadaissimplyfor | clarity,aslicensesarenotrequiredtoCanadaforEncryptionItems(pursuantto742.15(a)(1)) H andLicenseExceptionENChasbeenavailableforsubsidiariesandofficesoftheCanadian  d governmentandprivatesectorendusers(alongwiththepreviousSupplementNo.3topart740  0 listofcountries).TurkeyandIcelandareaddedbecausetheyaremembersoftheNorthAtlantic    TreatyOrganization(NATO).ThiswillincreaseeligibilityunderLicenseExceptionENCunder x  newparagraphs740.17(a)(1)and(b)(1)oftheEAR,whichwilldecreasethenecessityfor D  submittinglicenseapplications,reviewrequests,andsemiannualreports.f  g Ԁf  g  ` f  g ThisrevisionwillreducethenumberoflicenseapplicationssubmittedtoBISfortheexportor  reexportofencryptionproductsclassifiedunderECCNs5A002and5D002toBulgaria,Iceland, t Romania,andTurkeyby95%(approximately$37millioninexportsandreexportsforCY @ 2007).ThisrevisionwillnotchangetheamountoflicenseapplicationsreceivedbyBISforthe  \ exportorreexportofencryptionproductstoCanada,becauseCanada,whilenotincludedinthe ( listofcountriesthatreceivedfavorabletreatmentunderLicenseExceptionENC,already  receivedsuchbenefits. p!  f  g Section742.15 EncryptionItems  %X $ Paragraph742.15(a)isrevisedbymorespecificallydescribingwhatisEIcontrolledunder &$"& ECCNs5A002,5D002,and5E002.Thisrevisionharmonizeswithchangesthisrulemakesto (#( thelicenserequirementsparagraphsoftheseECCNs.Inaddition,asentenceisaddedthat l*%* advisesexporterstoreviewLicenseExceptionENCpriortosubmittingalicensetoBIS.Also, 8,', thephrase onacomputersystemisremovedfromtheintroductorytextof742.15inorderto  bemoreconsistentwiththefirstNoteintheLicenseRequirementsectionofECCN5D002. |  742.15(a)(2)LicenseRequirementsandReviewPolicyforECCNS5A992,5D992,and  d 5E992   0 Thisruleremovesformerparagraph742.15(a)(2),whichexplainedlicenserequirementsand    reviewpolicyforitemsclassifiedunderECCNS5A992,5D992,and5E992,becausethepurpose x  of742.15istosetforththelicenserequirementsandreviewpoliciesforitemscontrolledfor D  encryptionitem(EI)reasonsandtheseitemsarecontrolledforantiterrorism(AT)reasonsonly. ` Thelicenserequirementsandreviewpolicyfortheseitemsarefoundunderappropriateanti , terrorismsectionsofpart742.  Thisruleremovesthesecondsentenceof742.15(a)(2),becausetheindefinitelanguagedidnot @ addtothetransparencyoflicensingpolicy.Thesentencestated, Exportsandreexportsof  \ encryptionitemstogovernments,ortoInternetandtelecommunicationsserviceprovidersforthe ( provisionofservicesspecifictogovernments,maybefavorablyconsidered.Thisruleremoves  theextraneousphrase includingthosewhichauthorizeexportsandreexportsofencryption p!  technologytostrategicpartners(asdefinedin772.1oftheEAR)ofU.S.companies.Tobe <#" moretransparent,thisruleaddsthephrase orpreshipmentnotificationtoexplainthatELAs %X $ mayrequirepreshipmentnotification.Thisruleaddsanotetoparagraph(a)(2)toremind &$"& exportersthatjXvXXX1oncemassmarketencryptioncommoditiesandsoftwarehavebeenreviewedby (#( BISandtheENCEncryptionRequestCoordinator(Ft.Meade,MD)andreleasedfrom EIand z*%*  NScontrolspursuantto#X1XXjXv#HX1XXX1#X1XXHX1#jXvXXX1742.15(b)#X1XXjXve#jXvXXX1ԀoftheEAR,theyareclassifiedunderECCN5A992and  5D992respectively,andarethereafteroutsidethescopeofthissection.#X1XXjXv#  ThisruleremovesthenotificationandreviewrequirementsforitemsclassifiedunderECCNs 0  5A992,5D992,and5E992,whichweresetforthinformerparagraphs742.15(b)introductory  L paragraphand742.15(b)(1)oftheEAR.    ThisruleaddsareferencetotheENCEncryptionRequestCoordinator(FT.Meade,MD)with `  regardtotherequirementforreviewofmassmarketencryptioncommoditiesandsoftware. ,| Specificinstructionsforhowtofilloutform748P(multipurposeapplication)forsubmissionofa  reviewrequesthasbeenremoved,becausetheseinstructionswereredundantandinconsistent  withtheinstructionsfoundinparagraph(r)ofSupplementNo.2topart748oftheEAR. \ Instead,areferencetothisparagraph(r)isaddedtonewparagraph742.15(b)(1) Proceduresfor (x requestingreview. D Thisruleremovesformerparagraph(b)(2)(iii)thatprovidedauthorizationunderthedesignation !  of nolicenserequired(NLR)forexportsandreexportsofencryptioncommoditiesand X#" softwarependingmassmarkettreatmentreviewbyBIStogovernmentandnongovernmentend $%t $ userslocatedincountrieslistedinSupp.No.3topart740oftheEARorforinternaluseof &@"& foreignsubsidiariesorofficesoffirms,organizationsandgovernmentsheadquarteredinCanada ( $( orincountrieslistedinSupp.No.3topart740oftheEAR.Thisauthorizationwasbasedona *%* temporaryclassificationunderECCNs5A992and5D992,whichisinconsistentwiththeway  otheritemsareclassifiedintheEAR,thereforethisprovisionisremoved.Instead,encryption | commoditiesandsoftwarewillremainundertheclassificationofECCN5A002and5D002until H 30dayshavepassedsinceregistrationofthesubmittedreviewrequestorBISissuesa  d classificationunderECCN5A992or5D992.However,thisrulecreatesanewauthorization  0 underLicenseExceptionENCforsuchcommoditiesandsoftwarependingadecisionbyBIS    concerningmassmarkettreatmentundernewparagraph740.17(b)(1)oftheEAR.Thisrule x  addsexplanatorytextaboutthisnewprocedurein(b)(2) ActionbyBIS. D   742.15(b)(3)ExclusionsforNotificationandReviewRequirements  , Thisruleremovestheformerexclusionparagraphs,becauseitisnolongerapplicableandis  replacedbynewexclusionparagraphsfrommassmarketreviewrequirementsunder742.15(b). t Therearethreenewexclusions:Certainshortrangewirelesscommoditiesandsoftware,wireless @  personalareanetworkitems,and ancillarycryptographycommoditiesandsoftware.  \  742.15(b)(4)dormantencryptionandenablingsoftwareandcommodities   ThisrulecondensesthisparagraphtoremovetextthatpertainedtoECCNs5A992and5D992. p!   742.15(b)(5)ExamplesofMassMarketSoftware  %X $ ЀThephrase designedfor,bundledwith,orpreloadedonsingleCPUcomputesisrevisedto &$"& read designedforcomputersclassifiedasECCN4A994orEAR99.Thisphrasewaschanged (#( toremoveoutdatedandconfusingtextrelatedtocomputers.Thisrulealsoremovesthelast l*%* phrase andcommoditiesandsoftwareexportedviafreeoranonymousdownloads.Thisphrase 8,', wasremovedbecauseitconfusedthepublic,inthatitledpeopletobelievethatifthey  incorporatedfreeencryptionsoftwareoropensourceencryptionintotheirproductsthatitwas | notsubjecttotheEAR,whichisnotthecase. H  SupplementNo.6topart742 GuidelinesforSubmittingReviewRequestsforEncryption  0 Items     Theoptiontofaxsupportdocumentsisremoved,becausethatmethodhasbeenreplacedby x  eitheremailingthedocumentinPDForsendingthedocumentbymail.Arequirementtoobtain D  expressmailcertificationofthemailingofsupportdocumentationisaddedforthosethatintend ` torelyonthe30dayregistrationprovisionsoftheEAR. , Paragraph(a)isdividedinto5subparagraphsthatclarifyexistingreviewrequirementsand t procedures.Formerparagraph(a)isnownewsubparagraph(a)(1),andisrevisedtoadda @ requirementtoincludeabriefnontechnicaldescriptionofthetypeofproductbeingsubmitted,  \ e.g.,routers,diskdrives,cellphones,chips,etc.PartoftheintroductoryparagraphtoSupp. ( No.6thataddressedpriorreviewsismovedtoanewsubparagraph(a)(2),andisrevisedtoadd  arequirement,forproductswithminorchangesinencryptionfunctionality,toincludeacover p!  sheetwithcompletereferencetothepreviousreview(CCATS#,ApplicationControlNumber <#" (ACN),ECCN,authorizationparagraph)alongwithacleardescriptionofthechanges.New %X $ subparagraph(a)(3)requiresadescriptionofhowencryptionisusedintheproductandthe &$"& categoriesofencrypteddata(i.e.,storeddata,communications,managementdata,internaldata, (#( etc.).Newsubparagraph(a)(4)requires,formassmarketreviews,aspecificdescriptionof l*%* whomwillbereceivingtheproductandhowtheproductisbeingmarketed,aswellashowthis 8,', methodofmarketingandotherrelevantinformation(e.g.,costofproductandvolumeofsales)f  g   f  g asdescribedbytheCryptographyNote(Note3toCategory5,Part2).Newsubparagraph(a)(5) | clarifiesinformationaboutanyencryptionsourcecodebeingused. H Subparagraph(c)(1)isamendedbyaddingthephrase includingrelevantparameters,inputsand  0 settingstotheendofthefirstsentence.Subparagraph(c)(6)isamendedbyaddingmore    examplesofcommunicationandcryptographicfunctions,aswellasreplacingtheterm x   encryptionprotocolswithamoreaccurateterm cryptographicprotocolsandmethods.An D  additionalrequirementisaddedto(c)(6)todescribehowtheprotocolsthataresupportedare ` used.Thetextof(c)(11)isrevisedtomoreclearlydescribetheinformationthatwouldassist , BIS.  Theintroductorytextforparagraphs(d)and(e)areclarified. @  Section744.9 RestrictionsontechnicalassistancebyU.S.personswithrespectto ( encryptionitems   Thisruleremoves744.9oftheEARthatrequiredauthorizationfromBISforU.S.personsto <#" providetechnicalassistance(includingtraining)toforeignpersonswiththeintenttoaida %X $ foreignpersoninthedevelopmentormanufactureoutsidetheUnitedStatesofencryption &$"& commoditiesorsoftwarethat,ifofU.S.origin,wouldbe EIcontrolledunderECCNs5A002 (#( or5D002.Section744.9wasaddedtotheEARin1996whenjurisdictionoverdualuse l*%* encryptionitemswastransferredfromtheDepartmentofStatetotheDepartmentofCommerce. 8,', TechnicalassistanceistreateddifferentlyundertheInternationalTradeinArmsRegulations  (ITAR)thanitisinEAR.Technicalassistanceisconsideredaformof technologyunderthe | definitionof technologyinsection772.1oftheEAR.TheEARstatesthattechnical H assistance, maytakeformssuchasinstruction,skillstraining,workingknowledge,consulting  d servicesandthatit mayinvolvetransferof technicaldata.Whenapersonperforms  0 technicalassistance,whichdrawsupon development, production,or use technology    obtainedintheUnitedStatesorthatisofUSorigin,thenareleaseof technologytakesplace, x  whichisconsideredanexportorreexportandmayrequireauthorizationundertheEAR.BIS D  hasobservedthatthereisrarelyanapplicationforalicensesubmittedundertherequirementsof ` section744.9;however,requestsforauthorizationundersection744.9areoftenincludedin , licenseapplicationsforexportofECCN5E002Technology.ThishasledBIStoconcludethat  peoplearesubmittinglicenseapplicationsfortechnologyexportsandreexportswheninvolved t intechnicalassistance.Therefore,toharmonizetheunderstandingoftechnicalassistanceasitis @ understoodintheEARwiththepracticalapplicationofitbythepublic,BISisremovingsection  \ 744.9,whichbynomeansremovesanylicenserequirementsforcontrolledencryption ( technologyreleasedwhileperformingtechnicalassistance.Thisamendmentdoesnotaffectthe  scopeofthenoteinformer744.9inthatthemereteachingordiscussionofinformationabout p!  cryptography,including,forexample,inanacademicsettingorintheworkofgroupsorbodies <#" engagedinstandardsdevelopment,byitselfwouldnotestablishalicenserequirementunder %X $ ECCN5E002,evenwhereforeignpersonsarepresent.jXvXXX1Ԁ#X1XXjXv7#Section744.9isreplacedbya license &$"& requirementnoteinECCN5E002ontheCommerceControlList.   0  (#(   SupplementNo.2topart748 UniqueApplicationandSubmissionRequirements  F,', Thisruleaddsasentenceinstructingapplicantstoplacean Xintheboxmarked classification  requestinBlock5(TypeofApplication)ofFormBIS748Porselect Commodity | Classificationiffilingelectronically,becauseneithertheelectronicnorpaperformsprovidea H separateBlocktocheckforsubmissionofencryptionreviewrequests.  d  750.3ReviewoflicenseapplicationbyBISandothergovernmentagenciesand    departments  x  Thisrulemakesaneditorialcorrectionbyremovingparagraph(b)(2)(iv)andredesignating D  (b)(2)(v)as(b)(2)(iv).ThisparagraphreferredtotheArmsControlandDisarmamentAgency ` (ACDA),whichnolongerexists.However,ACDA'spersonnelandfunctionswereabsorbedby , theDepartmentofStatein1999.Therefore,thisrulerevisesparagraph(b)(2)(iii)byadding  nationalsecurityandnuclearnonproliferationtothedescriptionofStateDepartment'sconcerns. t MissiletechnologyisalsoaddedasaStateDepartmentconcernbecausetheStateDepartment @ chairstheMissileTechnologyExportcontrolinteragencyworkinggroup.  \ f  g f  V  g f  Wg 750.7IssuanceofLicenses   Thisruleremovesparagraph(c)(2),whichexplainedhowtoamendyourEncryptionLicense p!  Agreement(ELA)byletter.BIShasobservedatrendthatindustryhasbeensubmittinglicense <#" applicationsforreplacementornewELAswhentheywantachange.Inaddition,itismore %X $ efficientforapplicantstoapplyandtrackapplicationsthanletters,becauseofBIS'f  g Ԁelectronic &$"& applicationsystem.ItisalsoeasierforBIStoprocessandtracksubmissionsofapplicationsthan (#( lettersforthesamereason.Therefore,thisprovisionisremoved. l*%*  8,', Thisruleremovesthethirdandfourthsentencesintheintroductorytextofparagraph(d)that  pertaintotheresponsibilitiesofalicenseewithregardtoELAs.Thesesentencesareremoved, | becausealicenseemaynottransferitslicenseresponsibilities. H  762.2Recordstoberetained   0 Thisruleremovesparagraph(b)(8),whichreferredtorecordsrelatedtokeyescrowencryption    itemsunderLicenseExceptionKMI.ThisruleremovesLicenseExceptionKMIand x  SupplementNo.4topart742 KeyEscroworKeyRecoveryProductsCriteria,thereforethis D  recordkeepingrequirementnolongerexists. `  770.2ItemInterpretations   Thisrulemovesparagraph(n) Interpretation14:Encryptioncommodityandsoftwarereviews, t toanewnoteunderparagraphs740.17(b)and742.15(b),sothatexportersdonotmissthis @ importantinformationaboutwhentosubmitanewproductreviewwhenachangehasoccurred  \ intheencryptionproduct.Thetextofthisparagraphisalsorevisedforclarity.Thenote ( explainsthatanewproductreviewisnotrequiredwhenachangeinvolves:thesubsequent  bundling,patches,upgradesorreleasesofaproduct;namechanges;orchangestoapreviously p!  reviewedencryptionproductlimitedtoupdatesinanencryptionsoftwarecomponent(e.g., <#" versionupdatesofanencryptionlibrarythatiscalledbyaproducttoprovideencryption %X $ functionalitywheretheencryptionlibraryhaseitheralreadybeenreviewedordidnotrequired &$"& priorreview.) (#(  772.1DefinitionoftermsasusedintheExportAdministrationRegulations(EAR) . 8,', Thisruleremovesthedefinitionof strategicpartnerasthistermisf  g f  g notf  g Ԁusedinthecontrolor  licensingofencryptionitems.Thisrulealsoaddsdefinitionsfortwonewterms ancillary | cryptographyand personalareanetwork,whichareassociatedwithnewreviewandreporting H exclusionsinLicenseExceptionENC.  d        P        X    (      `   CommerceControlListSupplementNo.1topart774     ThisrulerevisestheNotaBenetotheCryptographyNoteatthebeginningofCategory5Part2 x  inordertoharmonizeitwiththerevisionsinthisrule. D  Thisruleclarifieswhatiscontrolledfor EIreasonsinECCNs5A002,5D002,and5E002by , replacingthetext EIappliestoencryptionitemstransferredfromtheU.S.MunitionsListtothe  CommerceControlListconsistentwithE.O.13026ofNovember15,1996(61FR58767)and t pursuanttothePresidentialMemorandumofthatdate.Referto742.15ofthissubchapter. @ withappropriatetextthatreferstospecificparagraphswithinthoseECCNsforwhichEIapplies.  \ ForECCN5A002,thenewEIcontrolreads HX1XXX1EIappliesto5A002.a.1,a.2,a.5,a.6anda.9.Refer ( to742.15oftheEAR.#X1XXHX1F#ForECCN5D002,thenewEIcontrolreads, HX1XXX1EIappliesto software  in5D002.aorc.1forequipmentcontrolledforEIreasonsinECCN5A002.Referto742.15of p!  theEAR.#X1XXHX1 #ForECCN5E002,thenewEIcontrolreads, EIappliesto technologyforthe <#"  development, production,or useofcommoditiesor softwarecontrolledforEIreasons %X $ inECCNs5A002or5D002.Referto742.15oftheEAR.Inaddition,LicenseException &$"& ENCisaddedtotheLicenseExceptionsectionofeachoftheseECCNs,becauseitisthe (#( principallicenseexceptionforEIcontrolleditems. l*%*  8,',  ECCN5A002   ThisruleremovesthelicenserequirementnotessectionfromECCN5A002,becausethereisnt | aWassenaarreportingrequirementforthisECCN.Inaddition,thisrulemakeseditorial H correctionstotheRelatedControlsparagraphbyreplacingtheuseoftheterm itemswith  d commoditieswhenreferringtoECCN5A002and5A992.Moreover,thisruleclarifiesthatif  0 commoditiesarelistedinparagraphs(a)through(f)intheNoteto5A002,andthereforethe    commoditiesareclassifiedunderECCN5A992,thentherelatedsoftwareandtechnologyare x  classifiedunderECCNs5D992and5E992respectively.ThisrulealsorevisesRelatedControls D  note2tobeconsistentwiththemassmarketreviewproceduresof742.15oftheEAR.This ` notenowreads 2)HX1XXX1AfterareviewandclassificationbyBIS,massmarketencryption , commoditiesthatmeeteligibilityrequirementsarereleasedfrom EIand NScontrols.These  commoditiesareclassifiedunderECCN5A992.c.See742.15(b)oftheEAR.#X1XXHX1 # t   ECCN5A992   \ Thisrulerevisestheantiterrorism(AT)controlsforECCN5A992,byplacingtheentireentry ( underATColumn1controls,foreaseofunderstandingandcompliance.Thisruleaddsanew  paragraph5A992.c.Thisnewparagraphclarifiesthatamassmarketcommodityisclassified p!  underECCN5A992uponcompletionofGovernmentreviewofacommodityinaccordance <#" withparagraph742.15(b)oftheEAR,whenthatreviewdeterminesthatthecommoditymeets %X $ therequirementsformassmarkettreatment.Encryptionitemsarenolongerpresumedeligible &$"& formassmarkettreatmentwhilependingGovernmentreview. (#(  ECCN5D002  8,', ThisruleremovesthethirdnoteintheLicenseRequirementsection,becausetheinformationin  itf  g f  g doesf  g Ԁnotf  g f  g Ԁharmonizef  g Ԁwiththerevisionmadeinthisrule.HX1XXX1Inaddition,thisruleaddsanothernote | totheRelatedControlsparagraphtoinformthepublicaboutthereviewandclassificationof H massmarketsoftware.  d  ECCN5D992     #X1XXHX1#Thisrulerevisestheantiterrorism(AT)controlsforECCN5D992,byplacingtheentireentry x  underATColumn1controls,foreaseofunderstandingandcompliance.HX1XXX1Paragraphs5D992.a.1 D  anda.2,and5D992.b.1andb.2,arecombinedas5D992.aand5D992.b,respectively,inorderto ` simplifytheentry.Thisrulealsoremovesparagraph5D992.c( softwaredesignedormodified , toprotectagainstmaliciouscomputerdamage,e.g.,viruses.)fromECCN5D992,whileaddinga  noteintheRelatedControlstating, #X1XXHX1#|X1XXX1Thisentrydoesnotcontrol softwaredesignedormodified t toprotectagainstmaliciouscomputerdamage,e.g.,viruses,wheretheuseof cryptographyis @ limitedtoauthentication,digitalsignatureand/orthedecryptionofdataorfiles.#X1XX|X1#HX1XXX1Certain  \ softwareforprotectionagainstmaliciousdamagethatmeetthecriteriaoftheRelatedControl ( notearethusnowdecontrolledandclassifiedasEAR99,unlessthesoftwareperformsfunctions  thatarecontrolledunderotherECCNs(whetherunderCategory5,part2orelsewhereinthe p!  CommerceControlList).#X1XXHX1U#HX1XXX1SuchsoftwareremainssubjecttotheEARandmaybeclassifiedunder <#" ECCN5D002or5D992ifitperformscryptographicfunctionalitycontrolledbytheseCategory %X $ 5,part2ECCNs(e.g.,dataorfileencryption,includingofuserorsystemdataunderSecure &$"& SocketLayer(SSL)encryption,evenifthecryptographicfunctionalityisnotdirectlyuser (#( accessible.)Examplesofsoftwaredecontrolledbythischangeincludecertainfirewallandother l*%* softwareforthescreeningofdigitalcontentandthedetectionandremovalofviruses,spyware 8,', andunsolicitedcommercialemail.  #X1XXHX1(#HX1XXX1#X1XXHX15#Thisrulealsoaddsanewparagraph5D992.c.Thisparagraphclarifiesthatmassmarket H softwareisclassifiedunderECCN5D992.cuponcompletionofGovernmentreviewofthe  d softwareinaccordwith742.15oftheEARwhenthatreviewdeterminesthatthesoftware  0 meetstherequirementsformassmarkettreatment.Encryptionsoftwareisnolongerpresumed    eligibleformassmarkettreatment. x  HX1XXX1 ECCN5E002  P #X1XXHX1i# ` ThisruleaddsaLicenseRequirementNotetoremindpeopletoconsiderthepossibilityofthe , releaseoftechnologywhenperformingtechnicalassistance;thenotereads, |X1XXX1Whenaperson  performsorprovidestechnicalassistancethatincorporates,orotherwisedrawsupon, t  technologythatwaseitherobtainedintheUnitedStatesorisofUS-origin,thenareleaseof @ the technologytakesplace.Suchtechnicalassistance,whenrenderedwiththeintenttoaidin  \ the developmentor productionofencryptioncommoditiesorsoftwarethatwouldbe ( controlledfor EIreasonsunderECCN5A002or5D002,mayrequireauthorizationunderthe  EAReveniftheunderlyingencryptionalgorithmtobeimplementedisfromthepublicdomain p!  orisnotofU.S.origin.#X1XX|X1 #ԚInaddition,inordertoharmonizewiththerevisionsinthisruleandfor <#" consistency,thisruleaddstexttotheRelatedControlsparagraphoftheListofItemsControlled %X $ sectiontoread jXvXXX1Thisentrydoesnotcontrol technology requiredforthe useofequipment &$"& excludedfromcontrolundertheRelatedControlsparagraphortheTechnicalNotesinECCN (#( 5A002or technologyrelatedtoequipmentexcludedfromcontrolunderECCN5A002.#X1XXjXv #jXvXXX1This *%*  technologyisclassifiedasECCN5E992.#X1XXjXvG#         P ECCN5E992  V Thisrulerevisestheantiterrorism(AT)controlsforECCN5E992,byplacingtheentireentry " r underATColumn1controls,foreaseofunderstandingandcompliance.Thisrulerevisesthe  > referencesin5E992.aand.btoconformtorevisionsincludedinthisrule.   X1XXX1AlthoughtheExportAdministrationActexpiredonAugust20,2001,thePresident,through R  ExecutiveOrder13222ofAugust17,2001,3CFR,2001Comp.,p.783(2002),asextendedby n the#X1XXX1#HX1XXX1NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1#X1XXX1,hascontinuedtheExport : AdministrationRegulationsineffectundertheInternationalEmergencyEconomicPowersAct.#X1XXX1 #   X1XXX1RulemakingRequirements  N 1.Thisinterimf  g finalf  g rulehasbeendeterminedtobenotsignificantforpurposesoff  g f  g Executive 6 Orderf  g Ԁ12866.   P        X    (      `    0   2.Notwithstandinganyotherprovisionoflaw,nopersonisrequiredtorespondto,norshallany J#" personbesubjecttoapenaltyforfailuretocomplywithacollectionofinformationf  g Ԁsubjectto %f $ therequirementsofthePaperworkReductionActof1995(44U.S.C.3501etseq.)(PRA), &2"& unlessthatcollectionofinformationdisplaysacurrentlyvalidOfficeofManagementand (#( Budget(OMB)ControlNumber.Thisruleinvolvestwocollectionsofinformationsubjecttothe z*%* PRA.OneofthecollectionshasbeenapprovedbyOMBundercontrolnumber06940088, F,',  MultiPurposeApplication,andcarriesaburdenhourestimateof58minutesforamanualor  electronicsubmission.TheothercollectionhasbeenapprovedbyOMBundercontrolnumber | 06940104, CommercialEncryptionItemsUndertheJurisdictionoftheDepartmentof H Commerce#X1XXX1#X1XXX1,andcarriesaburdenhourestimateof7hoursforamanualorelectronic  d submission.Sendcommentsregardingtheseburdenestimatesoranyotheraspectofthese  0 collectionsofinformation,includingsuggestionsforreducingtheburden,to#X1XXX1/#uX1XXX1Ԁf  g JasmeetSeehra,    f  g OMBDeskOfficer,f  g f  g bye-mailatjseehra@omb.eop.govorbyfaxto(202)395-7285#X1XXuX1#X1XXX1f  g ;andtothe x  OfficeofAdministrationf  g ,BureauofIndustryandSecurity,DepartmentofCommerce,14thand D  PennsylvaniaAvenue,N.W.,Room6622,Washington,D.C.20230.f  g  ` f  g        P       f  g 3.ThisruledoesnotcontainpolicieswithFederalismimplicationsasthattermisdefinedunder  f  g f  g ExecutiveOrderf  g Ԁ13132. t 4.TheprovisionsoftheAdministrativeProcedureAct(5U.S.C.553)requiringnoticeof  \ proposedrulemaking,theopportunityforpublicparticipation,andadelayineffectivedate,are ( inapplicablebecausethisregulationinvolvesamilitaryandforeignaffairsfunctionoftheUnited  States(5U.S.C.553(a)(1)).Further,nootherlawrequiresthatanoticeofproposedrulemaking p!  andanopportunityforpubliccommentbegivenforthisinterimfinalrule.Becauseanoticeof <#" proposedrulemakingandanopportunityforpubliccommentarenotrequiredtobegivenforthis %X $ ruleundertheAdministrativeProcedureActorbyanyotherlaw,theanalyticalrequirements &$"& oftheRegulatoryFlexibilityAct(5U.S.C.601etseq.)arenotapplicable.Therefore,this (#( regulationisissuedininterimfinalform.Althoughthereisnoformalcommentperiod,public l*%* commentsonthisregulationarewelcomeonacontinuingbasis.Commentsshouldbesubmitted 8,', toSharronCook,OfficeofExporterServices,BureauofIndustryandSecurity,Departmentof  Commerce,14thandPennsylvaniaAve.,NW,Room2705,Washington,D.C.20230.#X1XXX1# |  ListofSubjects   0 15CFRParts732,740,748and750 x  Ѐ  Administrativepracticeandprocedure,Exports,Reportingandrecordkeepingrequirements. D  X1XXX115CFRParts738,770and772 ,   Exports.#X1XXX1%#X1XXX1  15CFRPart744 @   Exports,Reportingandrecordkeepingrequirements,Terrorism.#X1XXX1,&#X1XXX1  \ #X1XXX1&#15CFRPart742 (   Exports,Terrorism.  X1XXX115CFRPart746 <#"   Exports,Reportingandrecordkeepingrequirements.#X1XXX1'# %X $ X1XXX115CFRPart762 (#(   Administrativepracticeandprocedure,Businessandindustry,Confidentialbusiness l*%* information,Exports,Reportingandrecordkeepingrequirements.#X1XXX1](#X1XXX1 8,', Ї15CFRPart774    Exports,Reportingandrecordkeepingrequirements.#X1XXX1w)# |   Accordingly,parts732,734,738,740,742,744,746,748,750,762,770,772and774of  d theExportAdministrationRegulations(15CFRparts730774)areamendedasfollows:  0  PART732[AMENDED]  x   f(Eh83"3"  3+2Eh  1  .3  0    Theauthoritycitationforpart732isrevisedtoreadasfollows:3+,݌D (#(# Ќ  HX1XXX1Authority :#X1XXHX1,#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;E.O.13026,61FR58767,3 ` CFR,1996Comp.,p.228;#X1XXHX19-#XvXXX1ԀE.O.13222,66FR44025,#X1XXXv.#HX1XXX1Ԁ3CFR,2001Comp.,p.783#X1XXHX1^.#HX1XXX1;NoticeofJuly , 23,2008,73FR43603(July25,2008)#X1XXHX1.#HX1XXX1.#X1XXHX1F/#HX1XXX1Ԁ#X1XXHX1/#  "3"  3/2Eh  2  .3  0    Section732.2isamendedbyrevisingparagraph(b)toreadasfollows:3/0݌N(#(# Ќ  732.2StepsRegardingScopeoftheEAR.  j        P * * *  *  * 6  (b)Step2:Publiclyavailabletechnologyandsoftware. Thisstepisrelevantforbothexports  andreexports.Determineifyourtechnologyorsoftwareispubliclyavailableasdefinedand ~!  explainedatpart734oftheEAR.SupplementNo.1topart734oftheEARcontainsseveral J#" practicalexamplesdescribingpubliclyavailabletechnologyandsoftwarethatareoutsidethe %f $ scopeoftheEAR.Theexamplesareillustrative,notcomprehensive.Notethatencryption &2"& softwarecontrolledforEIreasonsunderECCN5D002ontheCommerceControlList(referto (#( SupplementNo.1toPart774oftheEAR)HX1XXX1Ԁandmassmarketencryptionsoftwarewithsymmetric z*%* keylengthexceeding64bitsclassifiedunderECCN5D992#X1XXHX14#ԀshallbesubjecttotheEARevenif F,', publiclyavailable.Accordingly,theprovisionsoftheEARconcerningthepublicavailabilityof  itemsarenotapplicabletoencryptionitemscontrolledfor EIreasonsunderECCN5D002HX1XXX1and | massmarketencryptionsoftwarewithsymmetrickeylengthexceeding64bitsclassifiedunder H ECCN5D992#X1XXHX1V6#.  d        P  * *  *  * X *     PART734[AMENDED]  D  "3"  372Eh  3  .3  0    Theauthoritycitationforpart734isrevisedtoreadasfollows:37&8݌,(#(# Ќ  HX1XXX1Authority: #X1XXHX19#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;E.O.12938,59FR59099,3  CFR,1994Comp.,p.950;E.O.13020,61FR54079,3CFR,1996Comp.p.219;E.O.13026, t 61FR58767,3CFR,1996Comp.,p.228;#X1XXHX1W9#XvXXX1E.O.13222,66FR44025,#X1XXXv:#HX1XXX1Ԁ3CFR,2001Comp.,p. @ 783#X1XXHX1:#HX1XXX1;NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1h;#HX1XXX1;NoticeofNovember8,2007,72FR j 63963(November13,2007)#X1XXHX1;#HX1XXX1.#X1XXHX1s<#HX1XXX1Ԁ#X1XXHX1<# 6 "3"  3=2Eh  4  .3  0    Section734.3isamendedbyaddinganotetoparagraph(a)(4)toreadasfollows:  8" 3===݌J#"(#(# Ќ  734.3ItemsSubjecttotheEAR . &2"& (a)0  *0(#(#*0(#(#*(#((#(#   (4)0  *0(#(#*0P (#(#*z*%*P (#P (#   NOTETOPARAGRAPH(a)(4): Certainforeignmanufactureditemsdevelopedor F,', producedfromU.S.originencryptionitemsexportedpursuanttoLicenseExceptionENCare  subjecttotheEAR.Seesections740.17(a)and740.17(b)(4)(ii)oftheEAR. | "3"  3@2Eh  5  .3  0    SupplementNo.1topart734isamendedbyrevisingtheintroductoryparagraphtoreadas  0 follows:3@@݌  (#(# Ќ  SUPPLEMENTNO.1TOPART734HX1XXX1QUESTIONSANDANSWERS-TECHNOLOGY x  ANDSOFTWARESUBJECTTOTHEEAR #X1XXHX1A# D  HX1XXX1ThisSupplementNo.1containsexplanatoryquestionsandanswersrelatingtotechnologyand ` softwarethatissubjecttotheEAR.Itisintendedtogivethepublicguidanceinunderstanding , howBISinterpretsthispart,butisonlyillustrative,notcomprehensive.Inaddition,factsor  Аcircumstancesthatdifferinanymaterialwayfromthosesetforthinthequestionsoranswers t willbeconsideredundertheapplicableprovisionsoftheEAR.Exportersshouldnotethatthe @ provisionsofthissupplementdonotapplytoencryptionsoftwareclassifiedunderECCN5D002  \ for EIreasonsontheCommerceControlListorto#X1XXHX1B#HX1XXX1Ԁmassmarketencryptionsoftwarewith ( symmetrickeylengthexceeding64bitsclassifiedunderECCN5D992.#X1XXHX1E#HX1XXX1ԀThisSupplementis  dividedintoninesectionsaccordingtotopicasfollows:#X1XXHX1F# p!         P  * *  *  * X * <#"  PART738[AMENDED]  &$"& "3"  3G2Eh  6  .3  0    Theauthoritycitationforpart738f  g f  g continuesf  g Ԁtoreadasfollows:3G#H݌l*%*(#(# Ќ   8,',   HX1XXX1Authority: #X1XXHX1cI#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;10U.S.C.7420;10U.S.C.  7430(e);22U.S.C.287c;22U.S.C.3201etseq.;22U.S.C.6004;30U.S.C.185(s),185(u);42 | U.S.C.2139a;42U.S.C.6212;43U.S.C.1354;46U.S.C.app.466c;50U.S.C.app.5;22 H U.S.C.7201etseq.#X1XXHX1I#HX1XXX1;22U.S.C.7210#X1XXHX1bK#HX1XXX1;E.O.13026,61FR58767,3CFR,1996Comp.,p.228;#X1XXHX1K#XvXXX1Ԁ#X1XXXv+L#XvXXX1  d E.O.13222,66FR44025,#X1XXXvnL#HX1XXX1Ԁ3CFR,2001Comp.,p.783#X1XXHX1L#HX1XXX1;NoticeofJuly23,2008,73FR43603  > (July25,2008)#X1XXHX19M#HX1XXX1.#X1XXHX1M#HX1XXX1Ԁ#X1XXHX1N#HX1XXX1    #X1XXHX1KN#       P "3"  3N2Eh  7  .3  0    Section738.4isamendedbyrevisingparagraphs(a)(1)and(a)(2)(ii)(B)toreadasfollows:3NO݌` (#(# Ќ  738.4DeterminingWhetheraLicenseIsRequired.  ,| (a)  *  *  *    (1) HX1XXX1Overview. Onceyouhavedeterminedthatyouritemisclassifiedunderaspecific  ECCN,youmustuseinformationcontainedinthe LicenseRequirementssectionofthatECCN \ incombinationwiththeCountryCharttodecidewhetheralicenseisrequired.#X1XXHX1P#ԀNotethatnotall (x licenserequirementssetforthunderthe LicenseRequirementssectionofanECCNreferyou D totheCommerceCountryChart,butinsomecasesthissectionwillcontainreferencestoa  specificsectionintheEARforlicenserequirements.Insuchcases,thissectionwouldnotapply. !    (2)  *  * P * X#"     (ii)  * P * * $%t $       (B)HX1XXX1Ifno,alicenseisnotrequiredbasedontheparticularReasonforControland &@"& destination.ProvidedthatGeneralProhibitionsFourthroughTendonotapplytoyourproposed ( $( transactionandthatanyapplicablereviewrequirementsdescribedin742.15(b)oftheEAR *%* havebeenmetforcertainmassmarketencryptionitemscontrolledunderECCNs5A992or  5D992#X1XXHX1ZT#HX1XXX1,youmayeffectyourshipmentusingthesymbol NLR.Proceedtoparts758and762of | theEARforinformationonexportclearanceproceduresandrecordkeepingrequirements.Note H thatalthoughyoumaystopafterdeterminingalicenseisrequiredbasedonthefirstReasonfor  d Control,itisbesttoworkthrougheachapplicableReasonforControl.Afullanalysisofevery  0 possiblelicensingrequirementbasedoneachapplicableReasonforControlisrequiredto    determinethemostadvantageousLicenseExceptionavailableforyourparticulartransaction x  and,ifalicenseisrequired,ascertainthescopeofreviewconductedbyBISonyourlicense D  application.#X1XXHX1\V# `        P  * *  *  * X * ,     PART740[AMENDED]  @ "3"  3Z2Eh  8  .3  0    Theauthoritycitationforpart740continuestoreadasfollows:3ZZ݌((#(# Ќ    HX1XXX1Authority: #X1XXHX1[#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;22U.S.C.7201etseq.#X1XXHX1\#HX1XXX1; p!  E.O.13026,61FR58767,3CFR,1996Comp.,p.228;E.O.13222,66FR44025,3CFR,2001 <#" Comp.,p.783;NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1\#HX1XXX1.#X1XXHX1]#HX1XXX1Ԁ#X1XXHX1 ^#  %X $ "3"  3h^2Eh  9  .3  0    Section740.3isamendedbyrevisingparagraph(d)(5)toreadasfollows:3h^^݌(#((#(# Ќ  EXAvXXX1740.3ShipmentsofLimitedValue(LVS)#X1XXEXAvz_#. l*%*       * P * * *  * 8,', (d)  *  *  *    HX1XXX1(5)Exportsandreexportsofencryptioncomponentsorspareparts .Forcomponentsor | sparepartscontrolledfor EIreasonsunderECCN5A002,exportsandreexportsunderthis H LicenseExceptionmustbedestinedtosupportacommoditypreviouslyauthorizedforexportor  d reexport.#X1XXHX1`#  0       * P * * *  *    "3 "  3b2Eh  10  .3  0    Part740isamendedbyremovingandreservingsection740.8 KeyManagement D  Infrastructure(KMI).3b c݌`(#(# Ќ  "3 "  3#d2Eh  11  .3  0    Section740.13isamendedbyremovingthequotationmarksaroundtheterm massmarket  inthetitletoparagraph(d),paragraph(d)(1),footnote1,paragraph(d)(3)(i)andparagraph t (d)(3)(ii).3#dPd݌@(#(# Ќ    "3 "  3e2Eh  12  .3  0    Section740.17isrevisedtoreadasfollows:3ef݌((#(# Ќ  HX1XXX1740.17EncryptionCommodities,SoftwareandTechnology(ENC) .  LicenseExceptionENCauthorizesexportandreexportoff  g Ԁsoftwareandcommoditiesand p!  componentsthereforthatareclassifiedunderECCNs5A002.a.1,a.2,a.5,a.6f  g Ԁora.9f  g ,5B002, <#" 5D002#X1XXHX1f#X1XXX1,andtechnologythatisclassifiedunderECCN5E002.#X1XXX1h#X1XXX1ԀThisLicenseExceptionENCdoes %X $ notauthorize#X1XXX1i#HX1XXX1exportorreexportto,orprovisionofanyserviceinf  g Ԁanycountryf  g listedf  g inCountry &$"& GroupE:1inSupplementNo.1topart740oftheEAR,orreleaseofsourcecodeortechnology (#( toanynationalofacountrylistedinCountryGroupE:1#X1XXHX1i#X1XXX1.#X1XXX1-k#X1XXX1ԀReexportsandtransfersunderLicense l*%* ExceptionENCaresubjecttothecriteriasetforthinparagraph(c)ofthissection.Paragraph(d) 8,', ~O) ~e ~  ofthissectionsetsforthinformationaboutreviewrequestsrequiredbythissection.Paragraph e (e)setsforthreportingrequiredbythissection.#X1XXX1pk#X1XXX1 1 @*#X1XXX1Tm#X1XXX1 (a)Nopriorrevieworpostexportreportingrequired.   d   (1) Internal developmentor productionofnewproducts. LicenseExceptionENC  0 authorizesexportsandreexportsofitemsdescribedin(a)(1)(i),toendusersdescribedin a   (a)(1)(ii),fortheintendedendusedescribedin(a)(1)(iii)withoutpriorreviewbytheU.S. -  Government.      (i)Eligibleitems. EligibleitemsarethoseclassifiedunderECCNs5A002.a.1,.a.2,.a.5, , .a.6,or.a.9,5B002,5D002,or5E002. ]    (ii)EligibleEndusers. Eligibleendusersare#X1XXX1m#X1XXX1 'privatesectorendusers'whereverlocated#X1XXX1p#X1XXX1,  excepttocountrieslistedinCountryGroupE:1(seeSupplementNo.1topart740oftheEAR) \ thatareheadquarteredinacountrylistedinSupplementNo.3ofthispart. (    Notetoparagraph(a)(1)(ii): #X1XXX1hq#X1XXX1A'privatesectorenduser'is:#X1XXX1r#X1XXX1 %!      (1) Anindividualwhoisnotactingonbehalfofanyforeigngovernment;or "" f  g f  g     (2) Acommercialfirm(includingitssubsidiaryandparentfirms,andothersubsidiaries &$"& ofthesameparent)thatisnotwhollyownedby,orotherwisecontrolledbyoractingonbehalf U(#( of,anyforeigngovernment. !*%*  +',    (iii)EligibleEnduse. Theeligibleenduseisinternal developmentor productionof e newproductsbythosef  g Ԁendusers. 1    Notetoparagraph(a)(1)(iii): Allitemsproducedordevelopedwithitemsexportedor  d reexportedunderthisparagraph(a)(1)aresubjecttotheEAR.Theseitemsmayrequirereview  0 andauthorizationbeforesale,reexportf  g Ԁortransfer,unlessotherwiseauthorizedbylicenseor a   licenseexception.#X1XXX1*s#X1XXX1 -  #X1XXX1w#X1XXX1 (2)Exportsandreexportsto U.S.Subsidiaries. LicenseExceptionENCauthorizesexport ` andreexportofitemsclassifiedunderECCNs5A002.a.1,.a.2,.a.5,.a.6,or.a.9,5B002,5D002, , or5E002#X1XXX1;x#X1XXX1Ԁtoany U.S.subsidiary,whereverlocated,excepttocountrieslistedinCountryGroup ] E:1(seeSupplementNo.1topart740oftheEAR),#X1XXX1vy#X1XXX1ԀwithoutpriorreviewbytheU.S. ) Government.LicenseExceptionENCalsoauthorizesexportorreexportofsuchitemsbyaU.S.  companyanditssubsidiariestoforeignnationalswhoareemployees,contractorsorinternsofa \ U.S.companyoritssubsidiariesiftheitemsareforinternalcompanyuse,includingthe (  developmentor productionofnewproducts,withoutpriorreviewbytheU.S.Government.#X1XXX1^z#X1XXX1 Y  Notetoparagraph(a)(2): Allitemsproducedordevelopedwithitemsexportedorreexported "" underthisparagraph(a)(2)aresubjecttotheEAR.Theseitemsmayrequirereviewand $X $ authorizationbeforesale,reexportf  g Ԁortransfer,unlessotherwiseauthorizedbylicenseorlicense &$"& exception.#X1XXX1|#X1XXX1 U(#( #X1XXX1b~#HX1XXX1 (b)Priorreviewrequired.  +', LicenseExceptionENCauthorizestheexportandreexportofcommoditiesandsoftwarethat e requirealicenseunderECCNs5A002.a.1,a.2,a.5,a.6,ora.9,5B002,or5D002.Paragraph 1 (b)(1)(i)alsoauthorizestheexportandreexportof technologycontrolledforEIreasonsunder  ECCN5E002totheend-usersindicatedinsubparagraph(b)(1)(i).Exportsandreexports  d authorizedunderthisparagraph(b)ofLicenseExceptionENCrequiresubmissionofareview  0 requestinaccordancewithparagraph(d)ofthissection.LicenseExceptionENCdoesnot a   authorizetheexportorreexportofcryptanalyticitemstoany"governmentend-user".Exportor -  reexportofitemsthatprovidean"opencryptographicinterface"isonlyauthorizedunder   paragraph(b)(1)(i).Exportsandreexportsauthorizedunderparagraph(b)ofLicenseException ` ENCaresubjecttoreportingrequirementsinaccordancewithparagraph(e)ofthissection. ,  (1)Reviewrequiredwithoutwaitingperiod. OnceyourreviewrequestisregisteredwithBIS ) inaccordancewithparagraph(d)ofthissection,LicenseExceptionENCauthorizestheexports  orreexports(excepttocountrieslistedinCountryGroupE:1ofSupplementNo.1topart740 \ oftheEAR)tothefollowingdestinations: (    (i)ExportandreexporttocountrieslistedinSupplementNo.3ofthispart. 󀀀License Y ExceptionENCauthorizestheexportandreexportofencryptionitems,includingEIcontrolled %!  commoditiesorsoftware(excludingsourcecode)thatarependingreviewformassmarket "" treatment(under742.15(b)oftheEAR),#X1XXHX1~#HX1XXX1Ԁto"governmentend-users"andnon-"government $X $ end-users"locatedincountrieslistedinSupplement3ofthispart,aswellastoforeign &$"& subsidiariesorofficesoffirms,organizationsandgovernmentsheadquarteredincountrieslisted U(#( inSupplement3ofthispart.#X1XXHX1†#HX1XXX1 !*%*  +',    (ii)ExportandreexporttocountriesnotlistedinSupplementNo.3ofthispart.  e LicenseExceptionENCauthorizestheexportandreexportofthefollowingcommoditiesand 1 software:        (A) Encryptioncommoditiesandsoftware(includingkeymanagementproducts),as  d follows:forsymmetricalgorithmswithkeylengthsnotexceeding80bits;forasymmetric  0 algorithmswithkeylengthsnotexceeding1024bits;andforellipticcurvealgorithmswithkey a   lengthsnotexceeding160bits.(Afterreviewhasbeencompleted,theissuedCommodity -  ClassificationAutomatedTrackingSystem(CCATS)documentwillindicateauthorizationis   underparagraph(b)(2)or(b)(3)ofthissection,whicheverparagraphisappropriate.) `     (B)   Encryptionsourcecodethatwouldnotbeeligibleforexportorreexportunder ] LicenseExceptionTSU,providedthatacopyofthesourcecodeisincludedinthereview ) request,tonon-"governmentend-users"locatedinanycountryexceptacountrylistedinCountry  GroupE:1ofSupplementNo.1topart740oftheEAR.(Afterthereviewhasbeencompleted, \ theissuedCommodityClassificationAutomatedTrackingSystem(CCATS)documentwill ( indicateauthorizationisunderparagraph(b)(2)ofthissection.)d Y d#X1XXHX1I#HX1XXX1  #X1XXHX1#X1XXX1 (2)Reviewrequiredwith30daywait(non governmentendusers#X1XXX1l#X1XXX1Ԁonly). 󀀀 30daysafter "" yourreviewrequestisregisteredwithBIS#X1XXX1#X1XXX1Ԁinaccordancewithparagraph(d)ofthissectionand $X $ subjecttothereportingrequirementsinparagraph(e)ofthissection,LicenseExceptionENC &$"& authorizestheexportorreexportofthefollowingcommoditiesandsoftwaretonon government U(#( enduserslocatedinacountrynotlistedinSupplementNo.3tothispartorCountryGroupE:1 !*%* ofSupplementNo.1topart740oftheEAR#X1XXX1#X1XXX1:#X1XXX1#X1XXX1 +', Ї #X1XXX1#HX1XXX1  (i) Networkinfrastructuresoftwareandcommoditiesandcomponentsthereof(including e commoditiesandsoftwarenecessarytoactivateorenablecryptographicfunctionalityinnetwork 1 infrastructureproducts)providingsecureWideAreaNetwork(WAN),MetropolitanArea  Network(MAN),VirtualPrivateNetwork(VPN),satellite,digitalpackettelephony/media  d (voice,video,data)#X1XXHX1O#HX1XXX1Ԁoverinternetprotocol,cellularortrunkedcommunicationsmeetinganyof  0 thefollowingwithkeylengthsexceeding80bitsforsymmetricalgorithms: a   d  d  (A) AggregateencryptedWAN,MAN,VPNorbackhaulthroughput(includes   communicationsthroughwirelessnetworkelementssuchasgateways,mobileswitches, ` controllers,etc)greaterthand90dMbps; ,     (B) Wire(line),cableorfiber-opticWAN,MANorVPNsingle-channelinputdatarate ) exceedingd154dMbps;          (C) Media(voice/video/data)encryptionorcentralizedkeymanagementsupporting ( morethan250concurrentencrypteddatachannels,orencryptedsignalingtomorethan1,000 Y endpoints,fordigitalpackettelephony/media(voice/video/data)#X1XXHX1j#HX1XXX1Ԁoverinternetprotocol %!  communications;or ""     (D) Air-interfacecoverage(e.g.,throughbasestations,accesspointstomeshnetworks, &$"& bridges,etc.)exceeding1,000meters,whereanyofthefollowingapplies: U(#(       (1) Maximumtransmissiondataratesexceeding10Mbps(atoperatingranges +', beyond1,000meters); e       (2) Maximumnumberofconcurrentfull-duplexvoicechannelsexceeding30;or        (3) Substantialsupportisrequiredforinstallationoruse;  0   (ii) EncryptionsourcecodethatwouldnotbeeligibleforexportorreexportunderLicense -  ExceptionTSUbecauseitisnotpubliclyavailableasthattermisusedin740.13(e)(1)ofthe   EAR,andtheexportorreexportoftheencryptionsourcecodethatisnototherwiseeligiblefor ` LicenseExceptionENCunderparagraph(b)(1)(ii)(B)#X1XXHX1#HX1XXX1Ԁofthissection#X1XXHX1#HX1XXX1; ,   (iii) Encryptionsoftware,commoditiesorcomponentstherefor,thathaveanyofthe ) following:      (A) Beendesigned,modified,adaptedorcustomizedfor governmentenduser(s)or ( governmentenduse(e.g.,tosecuref  g police,f  g Ԁstatesecurityf  g ,oremergencyresponsef  g  Y communications),includingencryptioncommoditiesandsoftwareforexternalsecurity %!  operationscenter(SOC)/networkoperationscenter(NOC)commandandinfrastructure, public "" safetyradio,anddigitalforensics/computerforensics#X1XXHX1#HX1XXX1; $X $       (B) 󀀀Cryptographicfunctionalitythathasbeenmodifiedorcustomizedtocustomer U(#( specification;or !*%*  +',     (C) Cryptographicfunctionalityor encryptioncomponent(exceptencryption e softwarethatwouldbeconsideredpubliclyavailable,asthattermisusedin740.13(e)(1)ofthe 1 EAR)thatisuseraccessibleandcanbeeasilychangedbytheuser;    (iv) Cryptanalyticitems;  0   (v) Encryptioncommoditiesandsoftwarethatprovidefunctionsnecessaryforquantum -  cryptography,asdefinedinECCN5A002oftheCommerceControlList;     (vi) Encryptioncommoditiesandsoftwarethathavebeenmodifiedorcustomizedfor , computersclassifiedunderECCN4A003. ]  #X1XXHX1M#X1XXX1(3)Reviewrequiredwith30daywaitingperiod( governmentendusersornon   governmentendusers). #X1XXX1#X1XXX130daysafteryourreviewrequestisregisteredwithBIS#X1XXX1s#X1XXX1Ԁin \ accordancewithparagraph(d)ofthissection#X1XXX1#X1XXX1,LicenseExceptionENCauthorizestheexportand ( reexportofsoftwareandcommoditiesandcomponentsnotlistedinparagraph(b)(2)ofthis Y sectiontoeither governmentendusersornon governmentenduserslocatedinacountry %!  notlistedinSupplementNo.3tothispartorCountryGroupE:1ofSupplementNo.1topart "" 740oftheEAR#X1XXX1t#X1XXX1.#X1XXX1i#  f  g HX1XXX1 $X $  #X1XXHX1Ϊ#f  g X1XXX1(4)Itemsexcludedfromreviewrequirements. U(#(   (i)#X1XXX1>#X1XXX1ԀShort-rangewirelessencryptionfunctions .Commoditiesandsoftwarenototherwise !*%* controlledinCategory5,butthatareclassifiedunderECCN5A002,5B002f  g Ԁor5D002only +', becausetheyincorporatecomponentsorsoftwarethatprovideshort-rangewirelessencryption e functions(e.g.,withanominaloperatingrangenotexceeding100metersaccordingtothe 1 manufacturer'sspecifications).#X1XXX1ث#X1XXX1ԀCommoditiesandsoftwareincludedinthisdescriptioninclude  thosedesignedtocomplywiththeInstituteofElectricalandElectronicEngineers(IEEE)#X1XXX1#X1XXX1Ԁ802.11  d wirelessLANstandard(35meters)forshortrangeuseandthosedesignedtocomplywiththe  0 IEEE802.15.1standardthatprovideonlytheshortrangewirelessencryptionfunctionality,and a   wouldnotbeclassifiedunderCategory5,part1oftheCCL(telecommunications)absentthis -  encryptionfunctionality.Certainitemsexcludedfromreviewbythisparagraphmayalsobe   excludedfromreviewunderparagraph(4)(iii)ofthissection(personalareanetworks)or ` paragraph(4)(iv)ofthissection(commoditiesandsoftwarethatprovide"ancillary , cryptography").#X1XXX1#X1XXX1 ] #X1XXX1#X1XXX1   (ii) ForeignproductsdevelopedwithorincorporatingU.S.originencryptionsource ) code,components,ortoolkits. ForeignproductsdevelopedwithorincorporatingU.S.origin  encryptionsourcecode,componentsortoolkitsthataresubjecttotheEAR,providedthatthe \ U.S.originencryptionitemshavepreviouslybeenreviewedandauthorizedbyBISandthe ( cryptographicfunctionalityhasnotbeenchanged.#X1XXX1^#X1XXX1Ԁ#X1XXX1#Suchproductsincludeforeigndeveloped Y productsthataredesignedtooperatewithU.S.productsthroughacryptographicinterface. %!    (iii)Wireless"personalareanetwork"items. X1XXX1Wireless"personalareanetwork"itemsthat $X $ implementonlypublishedorcommercialcryptographicstandardsandwherethecryptographic &$"& capabilityislimitedtoanominaloperatingrangenotexceeding30metersaccordingtothe U(#( manufacturer'sspecifications.SeeNotaBeneofthedefinitionfor personalareanetworkin !*%* 772.1oftheEAR. +', Ї  (iv) Ancillarycryptography .#X1XXX1׵#X1XXX1ԀCommoditiesandsoftwarethatperform ancillary e cryptography.SeeNotaBeneofdefinitionof ancillarycryptographyin772.1ofthe 1 EAR.f  g NOTEtoparagraph(b): Anewproductreviewisrequiredifachangeismadeto#X1XXX1#HX1XXX1the  cryptographicfunctionality(e.g.,algorithms)orothertechnicalcharacteristicsaffectingLicense  d ExceptionENCeligibility(e.g.,encryptedthroughput)oftheoriginallyreviewedproduct.  0 #X1XXHX1#X1XXX1However,anewproductreviewisnotrequiredwhenachangeinvolves:the#X1XXX1Ժ#HX1XXX1subsequent a   bundling,patches,upgradesorreleasesofaproduct;namechanges;orchangestoapreviously -  reviewedencryptionproductwherethechangeislimitedtoupdatesofencryptionsoftware   componentswheretheproductisotherwiseunchanged.#X1XXHX1a#HX1XXX1 ` #X1XXHX1#HX1XXX1 (c)Reexportandtransfer .U.S.orforeigndistributors,resellersorotherentitieswhoarenot , originalmanufacturersofencryptioncommoditiesandsoftwarearepermittedtouseLicense ] ExceptionENConlyininstanceswheretheexportorreexportmeetstheapplicabletermsand ) conditionsofthissection.Transfersofencryptionitemslistedinparagraph(b)(2)ofthissection  to governmentendusers,orforgovernmentenduses,withinthesamecountryareprohibited, \ unlessotherwiseauthorizedbylicenseorlicenseexception. (  #X1XXHX1=#X1XXX1(d)#X1XXX1&#HX1XXX1Reviewrequestprocedures.  %!   (1)Submission. TorequestreviewofyourencryptionitemsunderLicenseExceptionENC#X1XXHX1o#HX1XXX1,you "" mustsubmittoBISandtotheENCEncryptionRequestCoordinatorformBIS748P $X $ (MultipurposeApplication),oritselectronicequivalentinaccordancewiththeinstructionsin &$"& paragraph(r)ofSupplementNo.2topart748 UniqueApplicationandSubmission U(#( Requirementsandtheapplicableinformationdescribedin#X1XXHX1@#HX1XXX1paragraphs(a)through(e)of !*%* SupplementNo.6topart742oftheEAR(GuidelinesforSubmittingReviewRequestsfor +', EncryptionItems).#X1XXHX1#HX1XXX1Failuretoproperlycompletetheseitemsmaydelayconsiderationofyour e reviewrequest.#X1XXHX1 #HX1XXX1 1        P        X ̀ #X1XXHX1#HX1XXX1(2)ActionbyBIS.   d   (i)Notification. Uponcompletionofitsreview,BISwillsendyouwrittennoticeoff  g f  g thef  g   0 provisionsofthissection,ifany,f  g underwhichf  g youritemsmaybeexportedorreexported. a     (ii)After30days. IfBIShasnot,within30daysofregistrationofacompletereviewrequest -  fromyou,informedyouthatyouritemisnotauthorizedforLicenseExceptionENC,youmay   exportorreexportundertheapplicableprovisionsofLicenseExceptionENC. `   (iii)HoldWithoutAction(HWA). BISmayholdyourreviewrequestwithoutactionif , necessarytoobtainadditionalinformationorforanyotherreasonnecessarytoensurean ] accuratedeterminationwithrespecttoENCeligibility.Timeonsuch holdwithoutaction ) statusshallnotbecountedtowardsfulfillingthe30daywaitingperiodspecifiedinthis  paragraphandinparagraphs(b)(2)and(b)(3)ofthissection.BISmayrequireyoutosupply \ additionalrelevanttechnicalinformationaboutyourencryptionitem(s)orinformationthat ( pertainstotheireligibilityforLicenseExceptionENCatanytime,beforeoraftertheexpiration Y ofthef  g f  g Ԁ30daywaitingperiodspecifiedinthisparagraphandinparagraphs(b)(2)and(b)(3)of %!  thissection.Ifyoudonotsupplysuchinformationwithin14daysafterreceivingarequestforit "" fromBIS,BISmayreturnf  g yourf  g Ԁreviewrequest(s)withoutactionf  g orf  g f  g otherwisef  g Ԁsuspendorrevoke $X $ youreligibilitytouseLicenseExceptionENCforthatitem(s).Atyourrequest,BISmaygrant &$"& youuptoanadditional14daystoprovidetherequestedinformation.Anyrequestforsuchan U(#( additionalnumberofdaysmustbemadepriortothedatebywhichtheinformationwas !*%* otherwiseduetobeprovidedtoBIS,andmaybeapprovedifBISconcludesthatadditionaltime +', isnecessary.#X1XXHX1#HX1XXX1 e  #X1XXHX1#HX1XXX1 f  g #X1XXHX1 #HX1XXX1f  g (e)Reportingrequirements .   (1)Semi-annualreportingrequirement. #X1XXHX1g#HX1XXX1ԀSemi-annualreportingisrequiredforexportstoall  d destinationsf  g f  g otherthanf  g ԀCanada,andf  g Ԁforf  g ԀreexportsfromCanada,underthislicenseexception.  0 Certainencryptionitemsandtransactionsareexcludedfromthisreportingrequirement,see a   paragraph(e)(1)(iii)ofthissection.f  g #X1XXHX1#HX1XXX1f  g Forinformationaboutwhatmustbeincludedinthereport -  andsubmissionrequirements,seeparagraphs(e)(1)(i)and(e)(1)(ii)ofthissectionrespectively.    #X1XXHX13#HX1XXX1  (i)f  g f  g Informationrequiredf  g g . Exportersmustincludeforeachitem,theCommodity , ClassificationAutomatedTrackingSystem(CCATS)numberandthenameoftheitem(s) ] exported(orreexportedfromCanada),and#X1XXHX1S#HX1XXX1Ԁthefollowinginformationintheirreports: )  #X1XXHX1#HX1XXX1   0  #X1XXHX1j#HX1XXX1(A) Distributorsorresellers. Foritemsexported(orreexportedfromCanada)toa \ distributororotherreseller,includingsubsidiariesofU.S.firms,thenameandaddress ( ofthedistributororreseller,theitemandthequantityexportedorreexportedand,if Y collectedbytheexporteraspartofthedistributionprocess,theend-usersnameand %!  address;""(#(#   0  (B)Individualconsumers .Foritemsexported(orreexportedfromCanada)to &$"& individualconsumers#X1XXHX1#Ԁthroughdirectsale,HX1XXX1thenameandaddressoftherecipient,the U(#( item,andthequantityexported;or!*%*(#(#  +',   0  (C)f  g ԀForeignmanufacturersandproductsthatuseencryptionitemsf  g f  g .f  g f  g Forexports e (i.e.,fromtheUnitedStates)ordirecttransfers(e.g.f  g Ԁbya"U.S.subsidiary"located 1 outsidetheUnitedStates)ofencryptioncomponents,sourcecode,generalpurpose  toolkits,equipmentcontrolledunderECCN5B002,technology,oritemsthatprovidean  d  opencryptographicinterfaceexportedtoaforeigndeveloperormanufacturer  0 headquarteredinacountrynotlistedinSupplementNo.3tothispartwhenintended a   foruseinforeignproductsdevelopedforcommercialsale,thenamesandaddressesof -  themanufacturersusingtheseencryptionitemsand,ifknown,whentheproductis   madeavailableforcommercialsale,anon-proprietarytechnicaldescriptionofthe ` foreignproductsforwhichtheseencryptionitemsarebeingused(e.g.,brochures,other , documentation,descriptionsorotheridentifiersofthefinalforeignproduct;the ] algorithmandkeylengthsused;generalprogramminginterfacestotheproduct,if ) known;anystandardsorprotocolsthattheforeignproductadheresto;andsourcecode,  ifavailable).#X1XXHX1#HX1XXX1\(#(#  #X1XXHX1k#f  g f  g HX1XXX1f  g f  g   #X1XXHX1#HX1XXX1   (ii)g f  g Submissionrequirementsf  g f  g . ForexportsoccurringbetweenJanuary1andJune30,a Y reportisduenolaterthanAugust1ofthatyear.ForexportsoccurringbetweenJuly1and %!  December31,areportisduenolaterthanFebruary1thefollowingyear.Thesereportsmustbe "" providedinelectronicform.Recommendedfileformatsforelectronicsubmissioninclude $X $ spreadsheets,tabulartextorstructuredtext.Exportersmayrequestotherreportingarrangements &$"& withBIStobetterreflecttheirbusinessmodels.ReportsmaybesentelectronicallytoBISat U(#( crypt@bis.doc.govandtotheENCEncryptionRequestCoordinatoratenc@nsa.gov,ordisks !*%* andCDscontainingthereportsmaybesenttothefollowingaddresses: +', Ї   0  (A)   DepartmentofCommerce,BureauofIndustryandSecurity,OfficeofNational e SecurityandTechnologyTransferControls,14thStreetandPennsylvaniaAve.,N.W., 1 Room2705,Washington,D.C.20230,Attn:EncryptionReports,and(#(#   0  (B)   Attn:ENCEncryptionRequestCoordinator,9800SavageRoad,Suite6940,Ft.  0 Meade,MD207556000.a  (#(#    (iii)Exclusionsfromreportingrequirement .Reportingisnotrequiredforthefollowing   itemsandtransactions: `   0  (A) Anyencryptionitemexported(orreexportedfromCanada)underparagraph(a)of , thissection;](#(#   0  (B) Encryptioncommoditiesorsoftwarewithasymmetrickeylengthnotexceeding64 ) bits;(#(#   0  (C) Encryptioncommoditiesorsoftwareauthorizedunderparagraph(b)(3)ofthis \ section,exported(orreexportedfromCanada)toindividualconsumers;((#(#   0  #X1XXHX1t#(D) Encryptionitemsexported(orreexportedfromCanada)HX1XXX1Ԁviafreeandanonymous Y download;%! (#(#   0  (E) EncryptionitemsfromortoaU.S.bank,financialinstitutionoritssubsidiaries, "" affiliates,customersorcontractorsforbankingorfinancialoperations;$X $(#(#  #X1XXHX1#HX1XXX1d  0  d( F )Itemslistedin(b)(4)ofthissection,unlessitisaforeignitemdescribedin(b)(4)(ii) &$"& thathasenteredtheUnitedStates;U(#((#(#   0  (G) Foreignproductsdevelopedbybundlingorcompilingofsourcecode;#X1XXHX1#HX1XXX1!*%*(#(#   0  (H) Generalpurposeoperatingsystems,ordesktopapplications(e.g.,e-mail,browsers, +', games,wordprocessing,database,financialapplicationsorutilities)authorizedunder e paragraph(b)(3)ofthissection;#X1XXHX1#HX1XXX11(#(#   0  (I) ClientInternetapplianceandclientwirelessLANcards;or(#(#   0  (J) Otheritemsasdeterminedonacasebycasebasis.#X1XXHX1# HX1XXX1 d(#(#  #X1XXHX1#(2)Reportingkeylengthincreases .Reportingisrequiredforcommoditiesandsoftwarethat, a   afterhavingbeenreviewedandauthorizedforLicenseExceptionENCbyBIS,aremodified -  onlytoupgradethekeylengthusedforf  g confidentialityorkeyexchangealgorithms.Suchitems   maybeexportedorreexportedunderthepreviouslyauthorizedprovisionofLicenseException ` ENCwithoutfurtherreview. ,   (i) Informationrequired . ] f  g   f  g   (A) Acertificationthatnochangetotheencryptionfunctionalityhasbeenmadeother ) thantoupgradethekeylengthforconfidentialityorkeyexchangealgorithms.  f  g f  g     (B) TheoriginalCommodityClassificationAutomatedTrackingSystem(CCATS) ( authorizationnumberissuedbyBISandthedateofissuance. Y   0  (C) Thenewkeylength.""(#(#   f  g   (ii)Submissionrequirements.  X 0  &$"&(#(#    0  (A) ThereportmustbereceivedbyBISandtheENCEncryptionRequestCoordinator U(#( beforetheexportorreexportoftheupgradedproduct;and!*%*(#(# f  g   0  f  g (B) Thereportisemailedtocrypt@bis.doc.govandf  4teeO  5  g enc@nsa.gov.f  g Ԛf  g 6eOxpor  7he$HX1XXX1+',(#(# #X1XXHX1#HX1XXX1"3 "  3N2Eh  13  .3  0    SupplementNo.3isamendedby:3N{݌e(#(# Ќ    a.0  Revisingthetitletoread LicenseExceptionENCFavorableTreatmentCountries; 1 and(#(#   b.0  Adding#X1XXHX1/#Bulgaria,Canada,Iceland,Romania,andTurkeyHX1XXX1Ԁinalphabeticorder.#X1XXHX1R#HX1XXX1 d(#(# #X1XXHX1# PART742[AMENDED]  -  "3 "  3C2Eh  14  .3  0    Theauthoritycitationforpart742continuestoreadasfollows:3Cp݌`(#(# Ќ    HX1XXX1Authority: #X1XXHX1^#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;22U.S.C.3201etseq.;42 ] U.S.C.2139a;22U.S.C.7201etseq.#X1XXHX1#HX1XXX1;22U.S.C.7210#X1XXHX1#HX1XXX1;Sec1503,Pub.L.108-11,117Stat.559; ) E.O.12058,43FR20947,3CFR,1978Comp.,p.179;E.O.12851,58FR33181,3CFR,1993  Comp.,p.608;E.O.12938,59FR59099,3CFR,1994Comp.,p.950;E.O.13026,61FR \ 58767,3CFR,1996Comp.,p.228;E.O.13222,66FR44025,3CFR,2001Comp.,p.783; ( PresidentialDetermination2003-23ofMay7,2003,68FR26459,May16,2003#X1XXHX1#HX1XXX1;NoticeofJuly Y 23,2008,73FR43603(July25,2008)#X1XXHX1#HX1XXX1;NoticeofNovember8,2007,72FR63963(November %!  13,2007)#X1XXHX1{#HX1XXX1.#X1XXHX1#HX1XXX1Ԁ#X1XXHX1Q#  ""  "3"  32Eh  15  .3  0    Section742.15isrevisedtoreadasfollows:3݌&$"&(#(# Ќ  HX1XXX1742.15EncryptionItems.  !*%* Encryptionitemscanbeusedtomaintainthesecrecyofinformation,andtherebymaybeused +', bypersonsabroadtoharmU.S.nationalsecurity,foreignpolicyandlawenforcementinterests. e TheUnitedStateshasacriticalinterestinensuringthatimportantandsensitiveinformationof 1 thepublicandprivatesectorisprotected.Consistentwithourinternationalobligationsasa  memberoftheWassenaarArrangement,theUnitedStateshasaresponsibilitytomaintain  d controlovertheexportandreexportofencryptionitems.AsthePresidentindicatedin  0 ExecutiveOrder13026andinhisMemorandumofNovember15,1996,exportsandreexportsof a   encryptionsoftware,likeexportsandreexportsofencryptionhardware,arecontrolledbecause -  ofthisfunctionalcapacitytoencryptinformation,andnotbecauseofanyinformationalor   theoreticalvaluethatsuchsoftwaremayreflect,contain,orrepresent,orthatitsexportor ` reexportmayconveytoothersabroad.Forthisreason,exportcontrolsonencryptionsoftware , aredistinguishedfromcontrolsonothersoftwareregulatedundertheEAR. ]  (a) #X1XXHX1#Ԁ Licensingrequirementsandpolicy"    (1)Licensingrequirements. 󀀀Alicenseisrequiredtoexportorreexportencryptionitems ( ( EI)classifiedunderECCN5A002HX1XXX1.a.1,a.2,a.5,a.6anda.9#X1XXHX1T #;HX1XXX15D002.aorc.1forequipment Y controlledforEIreasonsinECCN5A002;#X1XXHX1 #Ԁor5E002for|X1XXX1 technologyforthe development, %!   production,or useofcommoditiesor softwarecontrolledforEIreasonsinECCNs5A002 "" or5D002#X1XX|X1\ #Ԁtoalldestinations,exceptCanada.Refertopart740oftheEAR,forlicense $X $ exceptionsthatapplytocertainencryptionitems,andto772.1oftheEARfordefinitionsof &$"& encryptionitemsandterms.Mostencryptionitemsmaybeexportedundertheprovisionsof U(#( LicenseExceptionENCsetforthin740.17oftheEAR.Beforesubmittingalicense !*%* application,pleasereviewLicenseExceptionENCtodeterminewhetherthislicenseexceptionis +', availableforyouritemortransaction.Forexportsandreexportsofencryptionitemsthatarenot e eligibleforalicenseexception,exportersmustsubmitanapplicationtoobtainauthorization 1 underalicenseoranEncryptionLicensingArrangement.   (2)Licensingpolicy. ApplicationswillbereviewedonacasebycasebasisbyBIS,in  0 conjunctionwithotheragencies,todeterminewhethertheexportorreexportisconsistentwith a   U.S.nationalsecurityandforeignpolicyinterests.EncryptionLicensingArrangements(ELAs) -  maybeauthorizedforexportsandreexportsofunlimitedquantitiesofencryptioncommodities   andsoftwaretonationalorfederalgovernmentbureaucraticagenciesforciviluse,andtostate, ` provincialorlocalgovernments,inalldestinations,exceptcountrieslistedinCountryGroupE:1 , ofSupplementNo.1topart740.ELAsarevalidforfouryearsandmayrequirepostexport ] reportingorpreshipmentnotification.ApplicantsseekingauthorizationforEncryption ) LicensingArrangementsmustspecifythesalesterritoryandclassofenduserontheirlicense  applications. \  Notetoparagraph(a)ofthissection: jXvXXX1PursuanttoNote3toCategory5Part2ofthe Y CommerceControlListinSupplementNo.1topart774,oncemassmarketencryption 3!  commoditiesandsoftwarehavebeenreviewedbyBISandtheENCEncryptionRequest  #" Coordinator(Ft.Meade,MD)andreleasedfrom EIand NScontrolspursuantto#X1XXjXv6#HX1XXX1#X1XXHX1#jXvXXX1742.15(b)#X1XXjXv-#jXvXXX1 $ $ oftheEAR,theyareclassifiedunderECCN5A992and5D992respectively,andarethereafter &\"& outsidethescopeofthissection.#X1XXjXvx# (6$(  (b)Reviewrequirementformassmarketencryptioncommoditiesandsoftwareexceeding A,', 64bits: Massmarketencryptioncommoditiesandsoftwareemployingakeylengthgreaterthan e 64bitsforthesymmetricalgorithm(includingsuchproductspreviouslyreviewedbyBISand 1 exportedunderECCN5A002or5D002)aresubjecttotheEARandrequirereviewbyBISand  theENCEncryptionRequestCoordinator(Ft.Meade,MD),priortoexportorreexport.  d Encryptioncommoditiesandsoftwarethataredescribedin740.17(b)(2)oftheEARdonot  0 qualifyformassmarkettreatment.    X    (  a   X1XXX1NOTEtoparagraph(b): #X1XXX1|#X1XXX1ԀAnewproductreviewisrequiredifachangeismadeto#X1XXX1#HX1XXX1the   cryptographicfunctionality(e.g.,algorithms)orothertechnicalcharacteristicsaffectingmass ` marketeligibility(e.g.,performanceenhancementstoprovidenetworkinfrastructureservices,or , customizationstoend-userspecifications)oftheoriginallyreviewedproduct.#X1XXHX1U#X1XXX1However,anew ] productreviewisnotrequiredwhenachangeinvolves:the#X1XXX1#HX1XXX1subsequentbundling,patches, ) upgradesorreleasesofaproduct;namechanges;orchangestoapreviouslyreviewedencryption  productwherethechangeislimitedtoupdatesofencryptionsoftwarecomponentswherethe \ productisotherwiseunchanged.#X1XXHX1#  (       (1)Proceduresforrequestingreview. Torequestreviewofyourmassmarketencryption %!  products,youmustsubmittoBISandtheENCEncryptionRequestCoordinatortheinformation "" describedinparagraphs(a)through(e)ofSupplementNo.6tothispart742,andyoumust $X $ includespecificinformationdescribinghowyourproductsqualifyformassmarkettreatment &$"& underthecriteriaintheCryptographyNote(Note3)ofCategory5,Part2( Information U(#( Security),oftheCommerceControlList(SupplementNo.1topart774oftheEAR).Review !*%* requestsmustbesubmittedonFormBIS748P(MultipurposeApplication),oritselectronic +', equivalent,asdescribedin748.3oftheEAR.Seeparagraph(r)ofSupplementNo.2toPart e 748oftheEARforspecialinstructionsaboutthissubmission.Reviewrequeststhatarenot 1 submittedelectronicallytoBISshouldbemailedtotheaddressindicatedin748.2(c)ofthe  EAR.SubmissionstotheENCEncryptionRequestCoordinatorshouldbedirectedtothe  d mailingaddressindicatedin740.17(e)(1)(ii)oftheEAR.BISwillnotifyyouifthereareany  0 questionsconcerningyourrequestforreview(e.g.,becauseofmissingorincompatiblesupport a   documentation).  -  (2)ActionbyBIS. OnceBIShascompleteditsreview,youwillreceivewrittenconfirmation ` concerningtheeligibilityofyouritemsforexportorreexportasmassmarketencryption , commoditiesorsoftwareclassifiedunderECCN5A992or5D992.If,duringthecourseofits ] review,BISdeterminesthatyourencryptionitemsdonotqualifyformassmarkettreatment ) undertheEAR,orareotherwiseclassifiedunderECCN5A002,5B002,5D002f  g Ԁor5E002,BIS  willnotifyyouandwillreviewyourcommoditiesorsoftwareforeligibilityunderLicense \ ExceptionENC(see740.17oftheEARforreviewandreportingrequirementsforencryption ( itemsunderLicenseExceptionENC).BISreservestherighttosuspendyoureligibilityto Y exportandreexportundertheprovisionsofthisparagraph(b)andtoreturnreviewrequests, %!  withoutaction,iftherequirementsforreviewhavenotbeenmet.ThirtydaysafterBISregisters "" yourreviewrequest,youmayexportorreexportthesemassmarketencryptionproducts,without $X $ alicense,togovernmentandnongovernmentenduserslocatedinmostdestinationsoutsidethe &$"& countrieslistedinSupplementNo.3topart740oftheEAR(certaindestinationsandpersons U(#( mayrequirealicenseforantiterrorism(AT)reasonsorforreasonsspecifiedelsewhereinthe !*%* EAR),unlessotherwisenotifiedbyBIS(e.g.,becauseofmissingorincompletesupport +', documentationorconversiontoLicenseExceptionENCreview.)Thethirtydaysdoesnot e includeanytimethatyourreviewrequestisonholdwithoutaction. 1  (3)Exclusionsfromreviewrequirements. Thefollowingcommoditiesandsoftwaredonot  d requirereviewpriortoexportorreexportasmassmarketproducts.  0   (i)X1XXX1#X1XXX1-#X1XXX1 Short-rangewirelessencryptionfunctions .Commoditiesandsoftwarenototherwise -  controlledinCategory5,butthatareclassifiedunderECCN5A992or5D992onlybecausethey   incorporatecomponentsorsoftwarethatprovideshort-rangewirelessencryptionfunctions(e.g., ` withanominaloperatingrangenotexceeding100metersaccordingtothemanufacturer's , specifications).#X1XXX1-#X1XXX1ԀCommoditiesandsoftwareincludedinthisdescriptionincludethosedesignedto ] complywiththeInstituteofElectricalandElectronicEngineers(IEEE)#X1XXX10#X1XXX1Ԁ802.11wirelessLAN ) standard(35meters)forshortrangeuseandthosedesignedtocomplywiththeIEEE802.15.1  standardthatprovideonlytheshortrangewirelessencryptionfunctionality,andwouldnotbe \ classifiedunderCategory5,part1oftheCCL(telecommunications)absentthisencryption ( functionality.Certainitemsexcludedfromreviewbythisparagraphmayalsobeexcludedfrom Y reviewunderparagraph(3)(ii)ofthissection(personalareanetworks)orparagraph(3)(iii)of %!  thissection(commoditiesandsoftwarethatprovide"ancillarycryptography").#X1XXX10# X1XXX1 ""   (ii)#X1XXX13#ԀWireless personalareanetworkitems. X1XXX1Wireless"personalareanetwork"itemsthat &$"& implementonlypublishedorcommercialcryptographicstandardsandwherethecryptographic U(#( capabilityislimitedtoanominaloperatingrangenotexceeding30metersaccordingtothe !*%* manufacturer'sspecifications.#X1XXX14#X1XXX1ԀSeeNotaBeneofthedefinitionfor personalareanetworkin +', 772.1oftheEAR.#X1XXX16#X1XXX1 e #X1XXX16#X1XXX1  (iii) Ancillarycryptography .#X1XXX17#X1XXX1Commoditiesandsoftwarethatperform ancillary  cryptography.#X1XXX17#X1XXX1ԀSeeNotaBeneofdefinitionof ancillarycryptographyin772.1oftheEAR.#X1XXX1'8#   d (4)Commoditiesandsoftwarethatactivateorenablecryptographicfunctionality. a    Commodities,software,andcomponentsthatallowtheend-usertoactivateorenable -  cryptographicfunctionalityinencryptionproductswhichwouldotherwiseremaindisabledf  g ,f  g Ԁare   controlledaccordingtothefunctionalityoftheactivatedencryptionproduct. `  (5)Examplesofmassmarketencryptionproducts. Subjecttotherequirementsofthe ] CryptographyNote(Note3)inCategory5,Part2f  g ,f  g ԀoftheCommerceControlList,massmarket ) encryptionproductsinclude,butarenotlimitedto,generalpurposeoperatingsystemsand  desktopapplications(e.g.,email,browsers,games,wordprocessing,database,financial \ applicationsorutilities)designedforusewithcomputersclassifiedasECCN4A994orEAR99, ( laptops,orhandhelddevices;commoditiesandsoftwareforclientInternetappliancesandclient Y wirelessLANdevices;homeusenetworkingcommoditiesandsoftware(e.g.,personalfirewalls, %!  cablemodemsforpersonalcomputers,andconsumersettopboxes);andportableormobilecivil "" telecommunicationscommoditiesandsoftware(e.g.,personaldataassistants(PDAs),radios,or $X $ cellularproducts).  &$"&  "3"  3?2Eh  16  .3  0    SupplementNo.4 KeyEscroworKeyRecoveryProductsCriteriaisremovedand !*%* reserved.d 3?=?݌+',(#(# Ќ  d"3"  3_@2Eh  17  .3  0    SupplementNo.6isamended by:3_@@݌e(#(# Ќ    a.0  Revisingtheintroductoryparagraph;1(#(#   b.0  Revisingparagraph(a);(#(#   c.0  Revisingparagraph(c)(1),(c)(6),and(c)(11);  d(#(#   e.0  Revisingtheintroductoryparagraphsof(d)and(e),toreadasfollows:  0(#(#  SUPPLEMENTNO.6TOPART742HX1XXX1GUIDELINESFORSUBMITTINGREVIEW -  REQUESTSFORENCRYPTIONITEMS #X1XXHX1C#   ReviewrequestsforencryptionitemsmustbesubmittedonFormBIS-748P(Multipurpose ` Application),oritselectronicequivalent,andsupportedbythedocumentationdescribedinthis , Supplement,inaccordancewiththeproceduresdescribedin748.3oftheEAR.Toensurethat ] yourreviewrequestisproperlyrouted,insertthephrase"Massmarketencryption"or"License ) ExceptionENC"(whicheverisapplicable)inBlock9(SpecialPurpose)oftheapplicationform  andplacean"X"intheboxmarked"ClassificationRequest"inBlock5(TypeofApplication)- \ Block5doesnotprovideaseparateitemtocheckforthesubmissionofencryptionreview ( requests.Failuretoproperlycompletetheseitemsmaydelayconsiderationofyourreview Y request.BISrecommendsthatreviewrequestsbedeliveredviacourierservicebesentto: %!  BureauofIndustryandSecurity $X $ U.S.DepartmentofCommerce &$"& 14thStreetandPennsylvaniaAve.,N.W. U(#( Room2705 !*%* Washington,D.C.20230 +', ЇForelectronicsubmissionsviaSNAP-R,supportdocumentsnotreadilyattachedinPDFformat e mustbesentto: 1 BureauofIndustryandSecurity  d InformationTechnologyControlsDivision  0 Room2093 a   14thStreetandPennsylvaniaAve.,N.W. -  Washington,D.C.20230.   Inaddition,youmustsendacopyofyourreviewrequestandallsupportdocumentsto: , Attn:ENCEncryptionRequestCoordinator ) 9800SavageRoad,Suite6940  FortMeade,MD20755-6000. \ Ifyouintendtorelyonthe30dayregistrationprovisionsoftheregulations,expressmail ( certificationofthesedocumentsisneeded. Y (a)(1)Statethename(s)ofeachproductbeingsubmittedforreviewandprovideabrief "" non-technicaldescriptionofthetypeofproduct(e.g.,routers,diskdrives,cellphones,chips, $X $ etc.)beingsubmitted. &$"&   (2)Indicatewhethertherehavebeenanypriorreviewsoftheproduct(s),ifsuchreviewsare !*%* applicabletothecurrentsubmission.Forproductswithminorchangesinencryption +', functionality,youmustincludeacoversheetwithcompletereferencetothepreviousreview e (CommodityClassificationAutomatedTrackingSystem(CCATS)number,ApplicationControl 1 Number(ACN),ExportControlClassificationNumber(ECCN),authorizationparagraph)along  withacleardescriptionofthechanges.  d   (3)Describehowencryptionisusedintheproductandthecategoriesofencrypteddata a   (e.g.,storeddata,communications,managementdata,internaldata,etc.). -    (4)Formassmarketreviewrequests,describespecificallytowhomandhowtheproductis ` beingmarketedandstatehowthismethodofmarketingandotherrelevantinformation(e.g.,cost , ofproductandvolumeofsales)aredescribedbytheCryptographyNote(Note3toCategory5, ] Part2). )   (5)Isany encryptionsourcecodebeingprovided(shippedorbundled)aspartofthis \ offering?Ifyes,isthissourcecodepubliclyavailablesourcecode,unchangedfromthecode ( obtainedfromanopensourcewebsite,orisitproprietary encryptionsourcecode? Y   0  0(#(#*0P (#(#*0 P (#P (#*0 (# (#*0 (# (#*""(#(# (c)0  *0(#(#*0(#(#*&$"&(#(#   (1)Descriptionofallthesymmetricandasymmetricencryptionalgorithmsandkeylengths !*%* andhowthealgorithmsareused,includingrelevantparameters,inputsandsettings.Specify +', whichencryptionmodesaresupported(e.g.,cipherfeedbackmodeorcipherblockchaining e mode). 1   0  0(#(#*0P (#(#*0 P (#P (#*0 (# (#*0 (# (#*(#(#        P        X    (     (6)Stateallcommunicationprotocols(e.g.,X.25,Telnet,TCP,IEEE802.11,IEEE802.16,  0 SIP...)andcryptographicprotocolsandmethods(e.g.,SSL,TLS,SSH,IPSEC,IKE,SRTP, a   ECCN,MD5,SHA,X.509,PKCSstandards...)thataresupportedanddescribehowtheyare -  used.     0  *0(#(#*0P (#(#*0 P (#P (#*0 (# (#*` (# (#   (11)LicenseExceptionENC'Restricted'commoditiesandsoftwaredescribedbythe ] criteriain740.17(b)(2)requirelicensestocertain governmentendusers.Describewhether ) theproduct(s)meetanyofthe740.17(b)(2)criteria.Providespecificdataforeachofthe  parameterslisted,asapplicable(e.g.,maximumaggregateencrypteduserdatathroughput, \ maximumnumberofconcurrentencryptedchannels,andoperatingrangeforwirelessproducts). ( Ifthe740.17(b)(2)parametersarenotapplicabletothecommodityorsoftware,clearlyexplain Y why,(e.g.,byprovidingspecificdataevaluatedagainstthe740.17(b)(2)thresholds.) %!  Ѐ "" (d)Forreviewrequestsforhardwareorsoftware encryptioncomponentsotherthansource $X $ code(i.e.,chips,toolkits,executableorlinkablemodulesintendedforuseinorproductionof &$"& anotherencryptionitem)providethefollowingadditionalinformation: U(#(   0  *0(#(#*0P (#(#*0 P (#P (#*0 (# (#*!*%* (# (#  +', (e)Forreviewrequestsfor"encryptionsourcecode"providethefollowinginformation: e   0  *0(#(#*0P (#(#*0 P (#P (#*0 (# (#* (# (#  PART744[AMENDED]  0  "3"  3J_2Eh  18  .3  0    Theauthoritycitationforpart744continuestoreadasfollows:3J_w_݌- (#(# Ќ    HX1XXX1Authority: #X1XXHX1e`#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;22U.S.C.3201etseq.;42 ` U.S.C.2139a;22U.S.C.7201etseq.#X1XXHX1`#HX1XXX1;22U.S.C.7210#X1XXHX1a#HX1XXX1;E.O.12058,43FR20947,3CFR,1978 , Comp.,p.179;E.O.12851,58FR33181,3CFR,1993Comp.,p.608;E.O.12938,59FR ] 59099,3CFR,1994Comp.,p.950;E.O.12947,60FR5079,3CFR,1995Comp.,p.356;E.O. ) 13026,61FR58767,3CFR,1996Comp.,p.228;#X1XXHX1a#XvXXX1E.O.13099,63FR45167,3CFR,1998  Comp.,p.208#X1XXXvlc#HX1XXX1;#X1XXHX1c#XvXXX1ԀE.O.13222,66FR44025,#X1XXXv7d#HX1XXX1Ԁ3CFR,2001Comp.,p.783;E.O.13224,66FR j 49079,3CFR,2001Comp.,p.786#X1XXHX1d#HX1XXX1;#X1XXHX16e#HX1XXX1NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1ze#HX1XXX1; D NoticeofNovember8,2007,72FR63963(November13,2007)#X1XXHX1e#HX1XXX1.#X1XXHX1f#HX1XXX1Ԁ#X1XXHX1f#  u "3"  3&g2Eh  19  .3  0    Part744isamendedbyremovingandreservingsection744.9 Restrictionsontechnical $t $ assistancebyU.S.personswithrespecttoencryptionitems. 3&gSg݌&@"&(#(# Ќ  PART746[AMENDED] =*%*  "3"  3h2Eh  20  .3  0    Theauthoritycitationforpart746isrevisedtoreadasfollows:3hi݌ ,',(#(# Ќ  HX1XXX1Authority: #X1XXHX1i#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;22U.S.C.287c;Sec1503,Pub. e L.108-11,117Stat.559;22U.S.C.6004;22U.S.C.7201etseq.#X1XXHX13j#HX1XXX1;22U.S.C.7210#X1XXHX1/k#HX1XXX1;E.O.12854, 1 58FR36587,3CFR,1993Comp.,p.614;E.O.12918,59FR28205,3CFR,1994Comp.,p.  899;E.O.13222,3CFR,2001Comp.,p.783;PresidentialDetermination2003-23ofMay7,  d 2003,68FR26459,May16,2003;#X1XXHX1k#<( 4 <DLh<HX1XXX1PresidentialDetermination20077ofDecember7,2006,72  0 FR1899(January16,2007);NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1m#HX1XXX1.#X1XXHX1m# a   "3"  3Sn2Eh  21  .3  0    Section746.3isamendedbyrevisingthephrase LicenseExceptions:CIV,APP,TMP,   RPL,GOV,GFT,TSU,BAG,AVS,ENCorKMI.toread LicenseExceptions:CIV, ` APP,TMP,RPL,GOV,GFT,TSU,BAG,AVS,orENC.inparagraph(c).3Snn݌,(#(# Ќ  PART748[AMENDED]  ) "3"  3ep2Eh  22  .3  0    Theauthoritycitationforpart748continuestoreadasfollows:3epp݌\(#(# Ќ  HX1XXX1Authority: #X1XXHX1sq#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;E.O.13026,61FR58767,3 ( CFR,1996Comp.,p.228;#X1XXHX1q#XvXXX1ԀE.O.13222,66FR44025,#X1XXXvr#HX1XXX1Ԁ3CFR,2001Comp.,p.783;NoticeofJuly Y 23,2008,73FR43603(July25,2008)#X1XXHX1r#HX1XXX1.#X1XXHX1s#HX1XXX1Ԁ#X1XXHX1s# 3!  "3"  3*t2Eh  23  .3  0    SupplementNo.2topart748isamendedbyrevisingparagraph(r)toreadasfollows:3*tWt݌$f $(#(# Ќ  SupplementNo.2toPart748! uX1XXX1UNIQUEAPPLICATIONANDSUBMISSION &2"& REQUIREMENTS #X1XXuX1nu# c(#(    `    * h *  *  * p * /*%*  uX1XXX1(r)Encryptionreviewrequests. Enter,inBlock9(SpecialPurpose)oftheBIS!748P, License +', ExceptionENCifyouaresubmittinganencryptionreviewrequestforLicenseExceptionENC e (740.17oftheEAR)or massmarketencryptionifyouaresubmittinganencryptionreview 1 requestunderthemassmarketencryptionprovisions(742.15(b)oftheEAR).Ifyouseekan  encryptionreviewforanotherreason,enter encryptionother.#X1XXuX1v# X1XXX1Neithertheelectronicnor  d paperformsprovideaseparateBlocktocheckforthesubmissionofencryptionreviewrequests,  0 thereforeyoumustalso#X1XXX1x#X1XXX1,placean Xintheboxmarked ClassificationRequestinBlock5 a   (TypeofApplication)ofFormBIS-748Porselect CommodityClassificationiffiling -  electronically.#X1XXX1y# Failuretoproperlycompletetheseitemsmaydelayconsiderationofyourreview   request.  `      `    * h *  *  * p * ] PART750[AMENDED]  \ "3"  3]|2Eh  24  .3  0    Theauthoritycitationforpart750continuestoreadasfollows:3]||݌Y(#(# Ќ    uX1XXX1Authority: #X1XXuX1x}#uX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;Sec1503,Pub.L.108 "" 11,117Stat.559;E.O.13026,61FR58767,3CFR,1996Comp.,p.228;#X1XXuX1}#XvXXX1E.O.13222,66FR $X $ 44025,#X1XXXv~#uX1XXX1Ԁ3CFR,2001Comp.,p.783;PresidentialDetermination200323ofMay7,2003,68FR &2"& 26459,May16,2003#X1XXuX1+#HX1XXX1;NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1#HX1XXX1.#X1XXHX1a#HX1XXX1Ԁ#X1XXHX1#  q( $(  "3"  32Eh  25  .3  0    Section750.3isamendedby:30݌ ,',(#(# Ќ    a.0 ` Removingparagraph(b)(2)(iv)andredesignatingparagraph(b)(2)(v)as e (b)(2)(iv);and1` (#` (#   b.0 ` Revising(b)(2)(iii)toreadasfollows:` (#` (#  HX1XXX1H&%XHX1750.3ReviewofLicenseApplicationsbyBISandOtherGovernmentAgenciesandDepartments. #&%%H&##X1X%&#  0   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*;  (#(# (b)0  *0` (#(#*0 ` (#` (#*  (# (#   (2)0 ` *0 ` (#` (#*0 (# (#*n (#(#    ` HX1XXX1H&%XHX1(iii)TheDepartmentofStateisconcernedprimarilywithitemscontrolledfornational : security,nuclearnonproliferation,#HX1X%H&m#H&%XHX1#&%%H&N#H&%%&missiletechnology,regionalstability,antiterrorism,crimecontrol E reasons,andsanctions;and#&%%H&##X1X%&@#     ` HX1XXX1H&%XHX1(iv)TheDepartmentofJusticeisconcernedwithcontrolsrelatingtoencryptionitems , anditemsprimarilyusefulforthesurreptitiousinterceptionofwire,oral,orelectroniccommunications.#&%%H&##X1X%&# 7   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*x(#(# "3"  32Eh  26  .3  0    Section750.7isamendedby:3݌u(#(# Ќ    a.0 ` Removingandreservingparagraph(c)(2);andA  ` (#` (#   b.0 ` Removingthethirdandfourthsentencesintheintroductorytextofparagraph(d).  ""` (#` (# PART762[AMENDED] %@!&  "3"  32Eh  27  .3  0    Theauthoritycitationforpart762isrevisedtoreadasfollows: 3݌q' #((#(# Ќ  HX1XXX1Authority: #X1XXHX1#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;#X1XXHX1#XvXXX1ԀE.O.13222,66FR44025,#X1XXXvk#HX1XXX1Ԁ3 =)$* CFR,2001Comp.,p.783#X1XXHX1ƍ#HX1XXX1;NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX16#HX1XXX1.#X1XXHX1#HX1XXX1Ԁ#X1XXHX1#  +&, Ї X1XXX1"3"  3o2Eh  28  .3  0    Section762.2isamendedbyremovingandreservingparagraph(b)(8)thatrefersto e 742.15,KeyEscrowEncryptionItems.#X1XXX1P# 3o݌1(#(# Ќ  PART770[AMENDED]   d "3"  32Eh  29  .3  0    Theauthoritycitationforpart770isrevisedtoreadasfollows: 3D݌ 0(#(# Ќ  HX1XXX1Authority: 50U.S.C.app.2401etseq.;50U.S.C.1701etseq.;#X1XXHX1&#XvXXX1ԀE.O.13222,66FR44025,#X1XXXv’#HX1XXX1Ԁ3 a   CFR,2001Comp.,p.783#X1XXHX1#HX1XXX1;NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1#HX1XXX1.#X1XXHX1#HX1XXX1Ԁ#X1XXHX1H#  ;   X1XXX1"3"  3Ɣ2Eh  30  .3  0    Section770.2isamendedbyremovingparagraph(n).#X1XXX1# 3Ɣ݌n(#(# Ќ  PART772[AMENDED] k  "3"  32Eh  31  .3  0    Theauthoritycitationforpart772continuestoreadasfollows:3C݌7(#(# Ќ  HX1XXX1 Authority: #X1XXHX1"#HX1XXX150U.S.C.app.2401etseq.;50U.S.C.1701etseq.;#X1XXHX1v#XvXXX1ԀE.O.13222,66FR44025,#X1XXXv#HX1XXX1Ԁ3  CFR,2001Comp.,p.783#X1XXHX1S#HX1XXX1;NoticeofJuly23,2008,73FR43603(July25,2008)#X1XXHX1Ø#HX1XXX1.#X1XXHX1;#HX1XXX1Ԁ#X1XXHX1~#(#(#K(# x "3"  32Eh  32  .3  0    Section772.1isamendedby:3݌u(#(# Ќ    a.0 ` Removingthetermanddefinition strategicpartners;andA! ` (#` (#   b.0 ` Addingthetermsanddefinitionsfor ancillarycryptographyand personalarea  #" networkinalphabeticorder,toreadasfollows:$t $` (#` (#   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*&@"&(#(# "ancillarycryptography".Theincorporationorapplicationof"cryptography"byitemsthatare q( $( notprimarilyusefulforcomputing(includingtheoperationof"digitalcomputers"), =*%* communications,networking(includesoperation,administration,managementandprovisioning)  ,', or"informationsecurity". e X1XXX10  N.B. Commoditiesandsoftwarethatperform ancillarycryptography(e.g.,are  speciallydesignedandlimitedto:piracyandtheftpreventionforsoftware,music,etc.;  d gamesandgaming;householdutilitiesandappliances;printing,reproduction,imaging  0 andvideorecordingorplayback(butnotvideoconferencing);businessprocessmodeling a   andautomation(e.g.,supplychainmanagement,inventory,schedulinganddelivery); -  industrial,manufacturingormechanicalsystems(includingrobotics,otherfactoryor   heavyequipment,facilitiessystemscontrollersincludingfirealarmsandHVAC); ` automotive,aviationandothertransportationsystems).Commoditiesandsoftware , includedinthisdescriptionarenotlimitedtowirelesscommunicationandarenot ] limitedbyrangeorkeylength.)(#(# #X1XXX1.#  * ` * *  * h * ( "personalareanetwork".Adatacommunicationsystemhavingallofthefollowing %!  characteristics: ""   a.0 ` Allowsanarbitrarynumberofindependentorinterconnected'datadevices'to $X $ communicatedirectlywitheachother;and&$"&` (#` (#   b.0 ` Isconfinedtothecommunicationbetweendeviceswithintheimmediatevicinity U(#( ofanindividualpersonordevicecontroller(e.g.,singleroom,office,or !*%* automobile).+',` (#` (#   TechnicalNote  e 0  0` (#(#'Datadevice'meansequipmentcapableoftransmittingorreceivingsequencesof 1 digitalinformation.` (#` (# 0  N.B. X1XXX1 Personalareanetworkitemsincludebutarenotlimitedtoitemsdesignedto  0 complywiththeInstituteofElectricalandElectronicEngineers(IEEE)802.15.1 a   standard,class2(10meters)andclass3(1meter),butnotclass1(100meters)items. -  Thisincludesmosthomenetworkingdevices,butnotlongrangeenterpriseequipmentor   componentsthatcanbeusedinlongrangeequipment.IEEE802.15.1class2andclass3 ` devicesincludehandsfreeheadsets,wirelessnetworkingbetweenpersonalcomputers, , wirelessmice,keyboardsandprinters,GlobalPositioningSystems(GPS)receivers,bar ] codescannersandgameconsolewirelesscontrollers,aswellasdatacapablewireless ) telephonesanddevicesorsoftwarefortransferoffilesbetweendevicesusingObject  Exchange(OBEX).#X1XXX19#\(#(#   * ` * *  * h * Y Ѐ  %!  PART774[AMENDED] $X $  "3 "  32Eh  33  .3  0    Theauthoritycitationforpart774f  g f  g continuesf  g Ԁtoreadasfollows: 30݌&$"&(#(# Ќ  HX1XXX1Authority: #X1XXHX1P#XvXXX1Ԁ#X1XXXv#XvXXX150U.S.C.app.2401etseq.;#X1XXXv#XvXXX1Ԁ50U.S.C.1701etseq.;10U.S.C.7420;10U.S.C. U(#( 7430(e);22U.S.C.287c,22U.S.C.3201etseq.,22U.S.C.6004;30U.S.C.185(s),185(u);42 /*%* U.S.C.2139a;42U.S.C.6212;43U.S.C.1354;46U.S.C.app.466c;50U.S.C.app.5#X1XXXvG#HX1XXX1;22  ,', U.S.C.7201etseq.#X1XXHX1#HX1XXX1;22U.S.C.7210#X1XXHX1#XvXXX1;E.O.13026,61FR58767,3CFR,1996Comp.,p.228;#X1XXXvg#XvXXX1 e E.O.13222,66FR44025,#X1XXXvޯ#HX1XXX1Ԁ3CFR,2001Comp.,p.783;NoticeofJuly23,2008,73FR43603 ? (July25,2008)#X1XXHX1N#HX1XXX1.#X1XXHX1#HX1XXX1  #X1XXHX17# X1XXX1"3!"  32Eh  34  .3  0    0` (#(#InSupplementNo.1toPart774(theCommerceControlList),Category5  L Telecommunicationsand InformationSecurity,Part2InformationSecurityis }   amendedtorevisetheNotaBenetoCryptographyNote,toreadasfollows:3݌I ` (#` (# Ќ   #X1XXX1#HX1XXX1CATEGORY5-TELECOMMUNICATIONSAND INFORMATIONSECURITY    #X1XXHX1ӳ#|X1XXX1 II. InformationSecurity #X1XX|X1p#X1XXX1Ԁ | *0  *0` (#(#*0 ` (#` (#*0 (# (#*H(#(# #X1XXX1޴#HX1XXX1Ԁ N.B.toCryptographyNote: #X1XXHX1#|X1XXX1ԀMassmarketencryptioncommoditiesandsoftwareeligibleforthe y CryptographyNoteemployingakeylengthgreaterthan64bitsforthesymmetricalgorithm E mustbereviewedinaccordancewiththerequirementsof742.15(b)oftheEARinordertobe  releasedfromthe EIand NScontrolsofECCN5A002or5D002. x #X1XX|X1 #X1XXX1#X1XXX1# X1XXX1"3""  3T2Eh  35  .3  0    0` (#(#InSupplementNo.1toPart774(theCommerceControlList),Category5  #" Telecommunicationsand InformationSecurity,Part2InformationSecurity, $t $ ExportControlClassificationNumber(ECCN)5A002isamendedby3T݌&@"&` (#` (# Ќ    0 ` a.0 ` (#` (#RevisingtheEIparagraphoftheLicenseRequirementssection;q( $( (# (#   0 ` b.0 ` (#` (#RemovingtheLicenseRequirementsNotesfromtheLicense =*%* Requirementssection; ,', (# (#   0 ` c.0 ` (#` (#AddingalicenseexceptionparagraphtotheLicenseExceptionsection; e and1 (# (#   0 ` d.0 ` (#` (#RevisingtheRelatedControlsparagraphoftheListofItemsControlled  section,toreadasfollows:#X1XXX15#X1XXX1 d (# (#  #X1XXX1#HX1XXX15A002Systems,equipment,applicationspecific electronicassemblies,modulesand a   integratedcircuitsfor informationsecurity,asfollows(seeListofItemsControlled),and -  otherspeciallydesignedcomponentstherefor.     LicenseRequirements  ,   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*)(#(#    `     h      p   Control(s) `     h CountryChart \     0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*#X1XXHX1M#HX1XXX1Y(#(# EIappliesto5A002.a.1,a.2,a.5,a.6f  g Ԁanda.9.Referto742.15oftheEAR. "" #X1XXHX1#HX1XXX1 LicenseExceptions  U(#(   *0 ` *0 ` (#` (#*0 (# (#*0h(#(#*!*%*h(#h(# #X1XXHX1#HX1XXX1  ENC:0 ` YesforcertainEIcontrolledcommodities,see740.17oftheEARforeligibility.#X1XXHX1#HX1XXX1+',` (#` (#  ̀ListofItemsControlled  1   Unit: ` 0 *0 (# (#*0h(#(#*0h(#h(##X1XXHX1@#HX1XXX1 d(#(# 0  RelatedControls:1)5A002doesnotcontrolthecommoditieslistedinparagraphs(a)  0 through(f)intheNoteintheitemsparagraphofthisentry.Thesecommoditiesare a   insteadclassifiedunderECCN5A992,andrelatedsoftwareandtechnologyareclassified -  underECCNs5D992and5E992respectively.2)Afterareviewandclassificationby   BIS,massmarketencryptioncommoditiesthatmeeteligibilityrequirementsarereleased ` from EIand NScontrols.ThesecommoditiesareclassifiedunderECCN5A992.c. , See742.15(b)oftheEAR.](#(# 0  RelatedDefinitions:  0h(#(#*0h(#h(#*0(#(#*0p(#(##X1XXHX1F#HX1XXX1)p(#p(#   Items:#X1XXHX1#X1XXX1 ` * *  *  "3#"  32Eh  36  .3  0    InSupplementNo.1toPart774(theCommerceControlList),Category5 ( Telecommunicationsand InformationSecurity,Part2InformationSecurity,Export Y ControlClassificationNumber(ECCN)5A992isamendedbyrevisingtheLicense %!  RequirementssectionandparagraphcintheitemsparagraphoftheListofItems "" Controlledsection,toreadasfollows:#X1XXX1z#X1XXX13݌  $X $(#(# #X1XXX1=#X1XXX1Ԁ#X1XXX1#    `   &$"&  +', |X1XXX15A992#X1XX|X1X#jXvXXX1ԀEquipmentnotcontrolledby5A002.#X1XXjXv#|X1XXX1 e LicenseRequirements  ? #X1XX|X1#HX1XXX1  0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*#X1XXHX1#|X1XXX1 r(#(# Control(s) `    CountryChart o    #X1XX|X18#jXvXXX1ATappliestoentireentry  ATColumn1d   d#X1XXjXv#|X1XXX1  0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*#X1XX|X1#|X1XXX1V(#(#  ListofItemsControlled  S   *0 ` *0 ` (#` (#*0 (# (#*0h(#(#*h(#h(#   Items: R #X1XX|X1G#HX1XXX1  0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*#X1XXHX1#|X1XXX1O! (#(# @*c.Commoditiesthathavebeenreviewedanddeterminedtobemassmarketencryption $ $ commoditiesinaccordancewith742.15(b)oftheEAR. &N"& #X1XX|X12#X1XXX1Ԁ"3$"  3~2Eh  37  .3  0    InSupplementNo.1toPart774(theCommerceControlList),Category5 K*%* Telecommunicationsand InformationSecurity,Part2 InformationSecurity,Export ,', ControlClassificationNumber(ECCN)5D002isamendedby:3~݌e(#(# Ќ  ݀0  a.0` (#(#RevisingtheEIparagraphoftheLicenseRequirementssection;1` (#` (#   b.0 ` AddinganewlicenseexceptiontotheLicenseExceptionsection;` (#` (#   c.0 ` RemovingthethirdNoteintheLicenseRequirementssection;and d` (#` (#   d.0 ` RevisingtheRelatedControlsparagraphintheListofItemsControlledsection,  0 toreadasfollows:a  ` (#` (# Ѐ -   #X1XXX1]#HX1XXX15D002InformationSecurity Software.     LicenseRequirements  ,   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*)(#(# Control(s) `     h CountryChart    0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*#X1XXHX1#HX1XXX1\(#(# EIappliesto softwarein5D002.aorc.1forequipmentcontrolledforEIreasonsinECCN Y 5A002.Referto742.15oftheEAR. %!    0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*$X $(#(# #X1XXHX1#HX1XXX1LicenseExceptions !*%*   *0 ` *0 ` (#` (#*0 (# (#*0h(#(#*+',h(#h(# #X1XXHX1#HX1XXX1  ENC:0 ` YesforcertainEIcontrolledsoftware,see740.17oftheEARforeligibility.#X1XXHX1b# HX1XXX1e` (#` (#  ListofItemsControlled     Unit:$value  0 0  RelatedControls:#X1XXHX1#jXvXXX1Ԁ#X1XXjXv#jXvXXX1Ԁ1)Thisentrydoesnotcontrol software requiredforthe useof a   equipmentexcludedfromcontrolundertheRelatedControlsparagraphortheTechnical ;  NotesinECCN5A002or softwareprovidinganyofthefunctionsofequipment   excludedfromcontrolunderECCN5A002.ThissoftwareisclassifiedasECCN5D992.#X1XXjXvJ#HX1XXX1Ԁ  2)#X1XXHX1#HX1XXX1ԀAfterareviewandclassificationbyBIS,massmarketencryptionsoftwarethatmeet d eligibilityrequirementsarereleasedfrom EIand NScontrols.Thissoftwareis 0 classifiedunderECCN5D992.c.See742.15(b)oftheEAR.#X1XXHX1w#HX1XXX1a(#(# 0  RelatedDefinitions:#X1XXHX1#jXvXXX1Ԁ#X1XXjXv\#HX1XXX1  *0h(#(#*0h(#h(#*0(#(##X1XXHX1#jXvXXX1-(#(#   #X1XXjXv,#HX1XXX1Items: ` * *  * h   #X1XXHX1#X1XXX1Ԁ n "3%"  3e2Eh  38  .3  0    InSupplementNo.1toPart774(theCommerceControlList),Category5 : Telecommunicationsand InformationSecurity,Part2InformationSecurity,Export k!  ControlClassificationNumber(ECCN)5D992isamendedby:3e݌  7#"(#(#   0 ` a.0 ` (#` (#RevisingtheLicenseRequirementssection;% $ (# (#   0 ` b.0 ` (#` (#RevisingtheRelatedControlsparagraphoftheListofItemsControlled &j"& section;and(6$( (# (#   0 ` #X1XXX1/#c.0 ` (#` (#X1XXX1RevisingtheItemsparagraphoftheListofItemsControlledsection,to g*&* readasfollows:#X1XXX1#3,', (# (#  |X1XXX15D992#X1XX|X1#jXvXXX1 InformationSecurity softwarenotcontrolledby5D002.  e #X1XXjXv#|X1XXX1 LicenseRequirements  ?   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#* r(#(# Control(s) `    CountryChart o  #X1XX|X1m#jXvXXX1ATappliestoentireentry#X1XXjXv#jXvXXX1  ATColumn1d   #X1XXjXv&#jXvXXX1#X1XXjXv#d|X1XXX1  0 ` 0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*0(#(#*#X1XX|X1#|X1XXX1d(#(#  ListofItemsControlled  0   Unit:0 ` *0 ` (#` (#*0 (# (#*a(#(# 0  RelatedControls:Thisentrydoesnotcontrol softwaredesignedormodifiedtoprotect - againstmaliciouscomputerdamage,e.g.,viruses,wheretheuseof cryptographyis  limitedtoauthentication,digitalsignatureand/orthedecryptionofdataorfiles.`(#(#   RelatedDefinitions:#X1XX|X1#|X1XXX10  *0h(#(#*0h(#h(#*#X1XX|X1;#|X1XXX1,(#(#  #X1XX|X1#|X1XXX1  Items: ]!  #X1XX|X1#jXvXXX1a. Softwarespeciallydesignedormodifiedforthe development, production,or useof &j"& equipmentcontrolledbyECCN5A992.aor5A992.b. (D$(  *&* b. Softwarehavingthecharacteristics,orperformingorsimulatingthefunctionsofthe e equipmentcontrolledbyECCN5A992.aor5A992.b. ? #X1XXjXv#jXvXXX1#X1XXjXvn#X1XXX1c.#X1XXX1#|X1XXX1 Softwarethathasbeenreviewedanddeterminedtobemassmarketencryptionsoftwarein  Z accordancewith742.15(b)oftheEAR.  &  #X1XX|X1#|X1XXX1#X1XX|X1#X1XXX1#X1XXX1/#X1XXX1"3&"  32Eh  39  .3  0    InSupplementNo.1toPart774(theCommerceControlList),Category5  Telecommunicationsand InformationSecurity,Part2InformationSecurity,Export V ControlClassificationNumber(ECCN)5E002isamendedby:3݌"(#(# Ќ    a.0 ` RevisingtheEIparagraphandaddingaLicenseRequirementNoteintheLicense S Requirementssection;and` (#` (#   b.0 ` RevisingtheRelatedControlparagraphoftheListofItemsControlledsection,to  readasfollows:R` (#` (# Ѐ#X1XXX1r#X1XXX1Ԁ#X1XXX1#   |X1XXX15E002 TechnologyaccordingtotheGeneralTechnologyNoteforthe development, O!   productionor useofequipmentcontrolledby5A002or5B002or software #" controlledby5D002.  $ $  LicenseRequirements  ($(   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*,',(#(# ЇControl(s) `     h CountryChart 1   0 ` *0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#* d(#(# EIappliesto technologyforthe development, production,or useofcommoditiesor a    softwarecontrolledforEIreasonsinECCNs5A002or5D002.Referto742.15oftheEAR. -     `    LicenseRequirementNote: Whenapersonperformsorprovidestechnicalassistancethat ` incorporates,orotherwisedrawsupon, technologythatwaseitherobtainedintheUnited , StatesorisofUS-origin,thenareleaseofthe technologytakesplace.Suchtechnical ] assistance,whenrenderedwiththeintenttoaidinthe developmentor productionof ) encryptioncommoditiesorsoftwarethatwouldbecontrolledfor EIreasonsunderECCN  5A002or5D002,mayrequireauthorizationundertheEAReveniftheunderlyingencryption \ algorithmtobeimplementedisfromthepublicdomainorisnotofU.S.origin.#X1XX|X1Q#|X1XXX1 (    `    * h *  *  * p *#X1XX|X1#  Y |X1XXX1ListofItemsControlled  %!    * ` * *0  *0h(#(#*""h(#h(# 0  RelatedControls:Seealso#X1XX|X1f#|X1XXX15E992.#X1XX|X1s#jXvXXX1ԀThisentrydoesnotcontrol technology required $X $ forthe useofequipmentexcludedfromcontrolundertheRelatedControlsparagraph &2"& ortheTechnicalNotesinECCN5A002or technologyrelatedtoequipmentexcluded q( $( fromcontrolunderECCN5A002.This technologyisclassifiedasECCN5E992.#X1XXjXv#|X1XXX1K*%*(#(# #X1XX|X1#|X1XXX1  * ` * *0  *0h(#(#*#X1XX|X1#%,',h(#h(# X1XXX1"3'"  32Eh  40  .3  0    0` (#(#InSupplementNo.1toPart774(theCommerceControlList),Category5 e Telecommunicationsand InformationSecurity,Part2InformationSecurity, 1 ExportControlClassificationNumber(ECCN)5E992isamendedbyrevisingthe  LicenseRequirementssectionandtheListofItemsControlledsection,toreadas  d follows:#X1XXX1#|X1XXX13݌ 0` (#` (# Ќ  #X1XX|X1 #jXvXXX15E992 InformationSecurity technology,notcontrolledby5E002.#X1XXjXv#|X1XXX1  -   LicenseRequirements  n   0 ` 0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*0(#(#*k(#(# Control(s) `    CountryChart  #X1XX|X1$#jXvXXX1ATappliestoentireentry  ATColumn1d 6 d#X1XXjXv #|X1XXX1  0 ` 0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*0(#(#*#X1XX|X1D #|X1XXX1$ $(#(#  ListofItemsControlled  (($(   0 ` 0 ` (#` (#*0 (# (#*0h(#(#*0h(#h(#*0(#(#*#X1XX|X1 #|X1XXX1%,',(#(#   Items: e #X1XX|X1 #jXvXXX1a. Technologyn.e.s.,forthe development, productionor useof#X1XXjXv #jXvXXX1equipmentcontrolledby  5A992.a, informationsecurity#X1XXjXvQ #jXvXXX1orcryptologicequipmentcontrolledby5A992.bor software  r controlledby5D992.aorb.  L b. Technology,n.e.s.,forthe useofmassmarketcommoditiescontrolledby5A992.cor e  massmarket softwarecontrolledby5D992.c.#X1XXjXv # ?  f  g    `  f  g DATED: L   X1XXX1ChristopherR.Wall | AssistantSecretary H forExportAdministration#X1XXX1# y!   A,', Ї   `     h      p