Search Legislation

The Export Control Order 2008

Status:

This is the original version (as it was originally made). This item of legislation is currently only available in its original format.

Article 30

SCHEDULE 5INFORMATION SECURITY ITEMS

This schedule has no associated Explanatory Memorandum

1.  In this Schedule—

“business or academic collaborator”, in relation to an exporter, means a person who is either—

(a)

working by way of business in research and development of cryptography or cryptographic goods or software; or

(b)

is teaching, or undertaking research as a member of or at a university or institution of higher education into, cryptography or cryptographic goods or software,

and with whom the exporter has previously entered into a collaboration agreement;

“collaboration agreement” means an agreement for the carrying out of work comprising or related to research into the development of cryptography or cryptographic goods or software;

“development” has the same meaning as in Schedule 2;

“intra-group or collaborative end-use” means—

(a)

use by the exporter, or a subsidiary undertaking or parent undertaking of the exporter, in that person’s own commercial cryptographic goods; or

(b)

use by a business or academic collaborator of the exporter in that person’s own commercial cryptographic goods in accordance with the terms of a collaboration agreement with the exporter;

“parent undertaking” and “subsidiary undertaking” have the same meanings as in the Companies Act 2006(1) (see section 1162 of, and Schedule 7 to, that Act);

“production”, “technology” and “use” have the same meanings as in Schedule 2.

2.  The information security items specified in this Schedule are the following software and technology—

(a)cryptography development software specified in entry 5D002 of Annex I to the dual-use Regulation, other than software having the characteristics, or performing or simulating the functions, of equipment designed or modified to perform cryptanalytic functions;

(b)cryptography development technology specified in entry 5E002 of Annex I to the dual-use Regulation, other than technology for the development, production or use of—

(i)equipment designed or modified to perform cryptanalytic functions; or

(ii)software having the characteristics, or performing or simulating the functions, of equipment designed or modified to perform cryptanalytic functions

but only to the extent that such software or technology is for an intra-group or collaborative end-use.

3.  The information specified in this Schedule is—

(a)a general description of the goods, software or technology, such as might be contained in a product brochure;

(b)descriptions of all relevant encryption algorithms and key management schemes, and descriptions of how they are used by the goods, software or technology (eg, which algorithm is used for authentication, which for confidentiality and which for key exchange); and details (eg, source code) of how they are implemented (eg, how keys are generated and distributed, how key length is governed and how the algorithm and keys are called by the software);

(c)details of any measures taken to preclude user modification of the encryption algorithm, key management scheme or key length;

(d)details of pre- or post-processing of data, such as compression of plain text or packetisation of encrypted data;

(e)details of programming interfaces that can be used to gain access to the cryptographic functionality of the goods, software or technology; and

(f)a list of any protocols to which the goods, software or technology adhere.

Back to top

Options/Help

Print Options

Close

Legislation is available in different versions:

Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.

Original (As Enacted or Made):The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.

Close

Opening Options

Different options to open legislation in order to view more content on screen at once

Close

Explanatory Memorandum

Explanatory Memorandum sets out a brief statement of the purpose of a Statutory Instrument and provides information about its policy objective and policy implications. They aim to make the Statutory Instrument accessible to readers who are not legally qualified and accompany any Statutory Instrument or Draft Statutory Instrument laid before Parliament from June 2004 onwards.

Close

More Resources

Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as enacted version that was used for the print copy
  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • correction slips
  • links to related legislation and further information resources
Close

Impact Assessments

Impact Assessments generally accompany all UK Government interventions of a regulatory nature that affect the private sector, civil society organisations and public services. They apply regardless of whether the regulation originates from a domestic or international source and can accompany primary (Acts etc) and secondary legislation (SIs). An Impact Assessment allows those with an interest in the policy area to understand:

  • Why the government is proposing to intervene;
  • The main options the government is considering, and which one is preferred;
  • How and to what extent new policies may impact on them; and,
  • The estimated costs and benefits of proposed measures.
Close

More Resources

Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as made version that was used for the print copy
  • correction slips

Click 'View More' or select 'More Resources' tab for additional information including:

  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • links to related legislation and further information resources