The Dual-Use Items (Export Control) Regulations 2000

Regulations 9 (3), 10 (7)

SCHEDULE 3

PART I ITEMS IN RELATION TO WHICH THE REQUIREMENT IN REGULATION 9 (3) DOES NOT APPLY

Any item specified in entry 5A002 or 5D002 of Annex I if:

(1) it is generally available to the public by being sold, without restriction, from stock at retail selling points by means of:

(a) over the counter transactions,

(b) mail order transactions,

(c) electronic transactions, or

(d) telephone order transactions;

(2) its cryptographic functionality cannot easily be changed by the user;

(3) it is designed for installation by the user without further substantial support by the supplier; and

(4) details of it are accessible and will be provided, upon request, to the Secretary of State in order to enable him to ascertain whether the conditions in paragraphs (1) to (3) of this Part are satisfied.

PART II INFORMATION TO BE KEPT IN RELATION TO CERTAIN ITEMS LISTED IN PART 2 OF CATEGORY 5 IN ANNEX I

1.  A general description of the item, such as might be contained in a product brochure.

2.  Descriptions of all relevant encryption algorithms and key management schemes, and descriptions of how they are used by the item (for example, which algorithm is used for authentication, which for confidentiality and which for key exchange); and details (for example, source code) of how they are implemented (for example, how keys are generated and distributed, how key length is governed and how the algorithm and keys are called by the software).

3.  Details of any measures taken to preclude user modification of the encryption algorithm, key management scheme or key length.

4.  Details of pre- or post-processing of data, such as compression of plain text or packetization of encrypted data.

5.  Details of programming interfaces that can be used to gain access to the cryptographic functionality of the item.

6.  A list of any standards or protocols to which the item adheres.