Professional Documents
Culture Documents
ccl5 pt2
ccl5 pt2
Securitypage 1
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 2
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 3
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 4
N.B.: See 5A004.a for items formerly (b) Cryptographic equipment specially designed
specified in 5A002.a.2. and limited for banking use or 'money
transactions';
Note: 5A002.a does not control any of the
following: Technical Note: 'Money transactions' in
5A002 Note (b) includes the collection and
(a) Smart cards and smart card settlement of fares or credit functions.
readers/writers as follows:
(c) Portable or mobile radiotelephones for civil
(1) A smart card or an electronically use (e.g., for use with commercial civil cellular
readable personal document (e.g., token coin, radio communication systems) that are not
e-passport) that meets any of the following: capable of transmitting encrypted data directly
to another radiotelephone or equipment (other
a. The cryptographic capability is than Radio Access Network (RAN) equipment),
restricted for use in equipment or systems, nor of passing encrypted data through RAN
excluded from 5A002, 5A003 or 5A004 by Note equipment (e.g., Radio Network Controller
4 in Category 5 - Part 2 or entries (b) to (i) of (RNC) or Base Station Controller (BSC));
this Note, and cannot be reprogrammed for any
other use; or (d) Cordless telephone equipment not capable
of end-to-end encryption where the maximum
b. Having all of the following: effective range of unboosted cordless operation
(i.e., a single, unrelayed hop between terminal
1. It is specially designed and and home base station) is less than 400 meters
limited to allow protection of 'personal data' according to the manufacturer's specifications;
stored within;
(e) Portable or mobile radiotelephones and
2. Has been, or can only be, similar client wireless devices for civil use, that
personalized for public or commercial implement only published or commercial
transactions or individual identification; and cryptographic standards (except for anti-piracy
functions, which may be non-published) and
3. Where the cryptographic also meet the provisions of paragraphs a.2. to
capability is not user-accessible; a.5. of the Cryptography Note (Note 3 in
Category 5 Part 2), that have been customized
Technical Note: 'Personal data' for a specific civil industry application with
includes any data specific to a particular person features that do not affect the cryptographic
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 5
(g) Equipment meeting all of the following: a. Integral to a CPU that meets the
provisions of Note 3 in Category 5 - Part 2;
1. All cryptographic capability specified by
5A002.a meets any of the following: b. Integral to an operating system that is
not specified by 5D002; or
a. It cannot be used; or
c. Limited to OAM of the equipment.
b. It can only be made useable by means
of cryptographic activation; and b. Designed or modified to enable, by means of
cryptographic activation, an item to achieve or
2. When necessary as determined by the exceed the controlled performance levels for
appropriate authority in the exporters country, functionality specified by 5A002.a that would
details of the equipment are accessible and will not otherwise be enabled;
be provided to the authority upon request, in
order to ascertain compliance with conditions c. Designed or modified to use or perform
described above; quantum cryptography;
N.B.1: See 5A002.a for equipment that has Technical Note: Quantum cryptography
undergone cryptographic activation. is also known as Quantum Key Distribution
(QKD).
N.B.2: See also 5A002.b, 5D002.d and
5E002.b. d. Designed or modified to use cryptographic
techniques to generate channelizing codes,
(h) Mobile telecommunications Radio Access scrambling codes or network identification
Network (RAN) equipment designed for civil use, codes, for systems using ultra-wideband
which also meet the provisions 2. to 5. of part a. modulation techniques and having any of the
of the Cryptography Note (Note 3 in Category 5 following:
Part 2), having an RF output power limited to
0.1W (20 dBm) or less, and supporting 16 or d.1. A bandwidth exceeding 500 MHz;
fewer concurrent users; or
(i) Routers, switches or relays, where the d.2. A fractional bandwidth of 20% or
"information security" functionality is limited to more;
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 6
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 7
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 8
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 9
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 10
Reason for Control: NS, AT, EI List Based License Exceptions (See Part 740
for a description of all license exceptions)
Control(s) Country Chart (See
Supp. No. 1 to part CIV: N/A
738). TSR: N/A
NS applies to entire NS Column 1 ENC: Yes for certain EI controlled
entry technology, see 740.17 of the EAR
AT applies to entire AT Column 1 for eligibility.
entry
EI applies to Refer to 742.15 of List of Items Controlled
technology in the EAR.
5E002.a for Related Controls: See also 5E992. This
commodities or entry does not control technology
software controlled required for the use of equipment
for EI reasons in excluded from control under the Related
ECCNs 5A002, Controls paragraph or the Technical Notes
5A004 or 5D002, and in ECCN 5A002 or technology related to
to technology in equipment excluded from control under
5E002.b. ECCN 5A002.
Related Definitions: N/A
License Requirements Notes: Items:
(1) See 744.17 of the EAR for additional a. Technology according to the General
license requirements for microprocessors Technology Note for the development,
having a processing speed of 5 GFLOPS or production or use of equipment controlled
more and an arithmetic logic unit with an access by 5A002, 5A003, 5A004 or 5B002, or of
width of 32 bit or more, including those software controlled by 5D002.a or 5D002.c.
incorporating information security
functionality, and associated software and b. Technology to enable, by means of
technology for the production or cryptographic activation, an item to achieve or
Export Administration Regulations Bureau of Industry and Security September 20, 2016
Commerce Control List Supplement No. 1 to Part 774 Category 5 - Info. Securitypage 11
exceed the controlled performance levels for those incorporating information security
functionality specified by 5A002.a that would functionality, and associated software and
not otherwise be enabled. technology for the production or
development of such microprocessors.
Note: 5E002 includes information
security technical data resulting from List Based License Exceptions (See Part 740
procedures carried out to evaluate or determine for a description of all license exceptions)
the implementation of functions, features or
techniques specified in Category 5-Part 2. CIV: N/A
TSR: N/A
Export Administration Regulations Bureau of Industry and Security September 20, 2016