Export of Goods, Transfer of Technology and Provision of Technical Assistance (Control) Order 2003

PART II: INFORMATION REQUIRED UNDER ARTICLE 14(9)

The following information is required to be kept on record in relation to certain “goods” and “software” in Part 2 of Category 5 of Annex I to “the Regulation”:

1.

A general description of the “goods” and “software”(as defined in “the Regulation”), such as might be contained in a product brochure;

2.

Descriptions of all relevant encryption algorithms and key management schemes, and descriptions of how they are used by the “goods” and “software”(e.g., which algorithm is used for authentication, which for confidentiality and which for key exchange); and details (e.g., source code) of how they are implemented (e.g., how keys are generated and distributed, how key length is governed and how the algorithm and keys are called by the “software”);

3.

Details of any measures taken to preclude user modification of the encryption algorithm, key management scheme or key length;

4.

Details of pre- or post-processing of data, such as compression of plain text or packetisation of encrypted data;

5.

Details of programming interfaces that can be used to gain access to the cryptographic functionality of the “goods” and “software”; and

6.

A list of any standards or protocols to which the “goods” and “software” adhere.