FSB Notification application rules ( appendix 9 decision 3 FSB notification from April 21th of 2015 )

Branch in China
Branch in USA
 
 
Recommendations
07.11.2017

Appendix N 9


to the decision of the board


Eurasian Economic Commission


on April 21, 2015 , N Thirty


Regulation on the importation into the customs territory of the Eurasian Economic Union and exported from the customs territory of the Eurasian Economic Union of encryption (cryptographic) means

I. General provisions

    1. This Regulation determines the procedure for importation into the customs territory of
the Eurasian Economic Union (hereinafter referred to as - the importation of the Union) and export
from the customs territory of the Union (hereinafter - export) of encryption (cryptographic) means and
products containing such funds included in the section 2.19 single list of goods which are subject
to non-tariff measures in trade with third countries under the Protocol on measures of non-tariff
regulation in relation to third countries (appendix N 7 of the Treaty on the Eurasian Economic Union
by May 29, 2014 Year) (hereinafter - the encryption (cryptographic) means).         
    2. For the purposes of this Regulation used mean the following:
"uniform register of notifications" - a list of information on registered consent of the states -
members of the Union of notifications compiled according to the Annex N 1 and published on the
official Online Union information and telecommunications network "Internet";
"Notification" - recorded the agreement of the State - a member of the Union in the manner
prescribed by the Regulation on the notification of the characteristics of encryption (cryptographic)
means and products containing them, in accordance with Annex N 2, notice the manufacturer's
products (authorized representative of the manufacturer) in the form according to Appendix N 3,
containing information about the technical and cryptographic characteristics of the goods, which are
encryption (cryptographic) means, and products containing them, according to the list in accordance
with Annex N 4;
"Consent of the body" - a body of state power of the state - a member of the Union in the
area of state (national) security, authorized in accordance with the law of that State for approval of
licenses, issuing opinions (authorization documents) and the register of notifications.
Other concepts used in this Regulation shall apply to the values defined by the Protocol on
measures of non-tariff regulation in relation to third countries (appendix N 7 of the Treaty on the
Eurasian Economic Union by May 29, 2014 year) and international treaties, outside the Union law.
    3. Products included in the section 2.19 single list of goods which are subject to non-tariff
measures in trade with third countries under the Protocol on measures of non-tariff regulation in
relation to third countries (appendix N 7 of the Treaty on the Eurasian Economic Union by May 29,
2014 years), have the functions of encryption (cryptography) if they sell or provide incorporates the
following tools (systems and complexes)
    a) encryption (hardware, software, and hardware and software systems and systems that
implement algorithms for cryptographic transformation of data and for protecting data from
unauthorized access during transmission via communication channels and (or) during its processing
and storage);
    b) simulation protection means (hardware, software, and hardware and software systems
and systems that implement algorithms for cryptographic transformation of data and for protecting
against false information imposing);
at) means of electronic digital signature (e-signature), determined in accordance with the
laws of the - members of the Union (hereinafter - Member States);
    g) hardware, software, and hardware and software systems and systems that implement
algorithms for cryptographic transformation of the information with the implementation of such a
transformation by manual operation or automated tools based on such operations;
    d) hardware, software, and hardware and software systems and systems that implement
algorithms and cryptographic transformation of information intended for the production of key
documents (regardless of the type of media key information);
e) hardware, software, and hardware and software, systems and complexes, designed or
modified to perform cryptanalytic functions;
    x) hardware, software, and hardware and software, systems and complexes, which
implements a cryptographic transformation of information, designed or modified to use cryptographic
techniques to generate the spreading code for systems with an expanding range, including the
hopping code for systems with frequency hopping;
    h) hardware, software, and hardware and software, systems and complexes, which
implements a cryptographic transformation of information, designed or modified to use cryptographic
techniques to classify or channelization codes for time-modulated ultra-wideband systems.
    4. If encryption (cryptographic) means contain in their composition of radio electronic and
(or) high frequency devices of civil use, included in Section 2.16 Uniform list of goods subject to
bans or restrictions on the import or export of the states - members of the Customs Union within the
Eurasian Economic Community in trade with third countries, approved the decision of the Board of
the Eurasian Economic Commission on August 16, 2012 , N 134 (hereinafter - the Single List), or
if the encryption (cryptographic) means part of such electronic means and (or) high frequency
devices, the importation of such goods shall be in accordance with the provisions on the use
restrictions (Regulation on the importation into the customs territory of the Customs Union electronic
means and (or) high frequency devices of civil use, including built-in or a part of other goods),
approved by the decision of the Board of the Eurasian Economic Commission on August 16, 2012 ,
N 134.
If encryption (cryptographic) means includes in its composition special technical means
intended for secret information included in section 2.17 Single List, the category of goods is
determined by the matching body.
    5. Import and (or) export of encryption (cryptographic) means carried out in the presence
of information on the inclusion of the relevant notification of the single register of notifications
(hereinafter - information on notification), or under license, drawn up in accordance with the
Instruction on the design of an application for an export license, and ( or) import of certain kinds of
goods and about the design of such a license approved by the decision of the Board of the Eurasian
Economic Commission on November 6, 2014 , N 199 (hereinafter - the license) or imprisonment
(of permission) in the form approved by decision of the Board of the Eurasian Economic Commission
on May 16, 2012 , N 45 (hereinafter - resolution (permit)).
                  

II. Placed under the customs procedure

    6. Putting encryption (cryptographic) facilities under the customs procedure of release for
domestic consumption and export is carried out by the customs authorities of the Member State of a
license or notification information.
Putting encryption (cryptographic) facilities under the customs procedure of release for
domestic consumption and exports to ensure their own needs without the right of distribution and
the provision of third party services in the field of encryption (cryptography) is carried out by the 
customs authorities of a Member State to enter into (permit document) or information about the
notification.
Not required to submit a license, imprisonment (of permission) or information about
notification when placed under the customs procedure of release for domestic consumption or export
of mobile operators samples test SIM cards for international exchange in the amount of not more
than 20 pieces.
    7. Putting encryption (cryptographic) facilities under the customs procedure for processing
on customs territory,processing outside the customs territory, processing for domestic
consumption, temporary admission (admission), temporary export, customs-free zone and free
warehouse is carried out by the customs authorities of a Member State to enter into (permit
document) or information about the notification.
Putting encryption (cryptographic) facilities under the customs procedure of re-export or reimport
at the completion of customs procedures for temporary admission (admission) or temporary
export, respectively, is carried out upon the conclusion (of permission), under which such products
have been placed under the customs procedure of temporary importation (tolerance) or temporary
export, or information about the notification. In other cases, the premises of encryption
(cryptographic) facilities under the customs procedure of re-import or re-export is carried out by the
customs authorities of a Member State to enter into (permit document) or information about the
notification.
    8. Putting encryption (cryptographic) facilities under the customs procedure of customs
transit for transportation from the customs authority in the place of arrival to the customs territory of
the Union to the local customs authority, as well as transportation from the local customs authority to
customs authority in the place of departure from the customs territory of the Union, as well as under
customs procedures, customs warehouse and the refusal by the state is carried out under license or
imprisonment (of permission) submitted for placement under other customs procedures, or
information about the notification.
Putting encryption (cryptographic) facilities under the customs procedure of customs transit
for transportation from the customs authority in the place of arrival to the customs territory of the
Union to the customs authority in the place of departure from the customs territory of the Union, as
well as under the customs procedure of destruction carried out without submission to the customs
authorities of Member States of the license, the conclusion (of permission) or information about the
notification.
    9. Putting encryption (cryptographic) facilities under the customs procedure of free trade is
carried out by the customs authorities of Member State information about the notification.

III. Grant of a license

    10. To obtain a license, legal persons and natural persons registered as individual
entrepreneurs (hereinafter - applicants) shall submit to the competent authority of the Member State
in whose territory the applicant is registered, the documents and information referred to in
subparagraphs 1 - 5 points 10 Rules for issuing licenses and permits for export and (or) import of
goods (Annex to Appendix N 7 of the Treaty on the Eurasian Economic Union by May 29,
2014 Year) (hereinafter - the Rules) and in accordance with subparagraph 6 points 10 Rules of
the following documents and information:
    a) a notice of the applicant or any other document provided for by the legislation of a
Member State, the absence of a part of the imported encryption (cryptographic) means of electronic
means and (or) high frequency devices of civil appointment included in the section 2.16 Single List;
b) other documents required by the legislation of a Member State.
eleven. Copies of the documents submitted by the applicant, must be certified in the manner
prescribed by paragraph 11 of the Rules.
    12. The decision to issue a license is adopted the competent authority of the Member State
in agreement with the consent of the procedure stipulated by the legislation of that Member State.
The applicant, if the legislation of a Member State, to be submitted to the agreement of the
documents referred to in paragraph 10 of these Regulations. At the same time the documents
referred to in subparagraph "b" of item 10 hereof, the authorized body of a Member State is not
represented.
Reconciliation can be performed through the issuance of the conclusion (of permission).
    13. In refusing to issue a license if there are grounds provided by subparagraphs 1 - 4
points 14 of the Rules, and in accordance with subparagraph 6 points 14 of the Regulation - in
case of failure to agree on the agreement of license application.

IV. Issuance of the conclusion (of permission)

     14. Conclusion (permit) for the premises of encryption (cryptographic) facilities under
customs procedures provided for in points 6 and 7 of this Regulation shall be issued in agreement
with the representation of the body the following documents:
a) draft opinion (of permission), designed in accordance with the guidelines on filling in a
single form of imprisonment (of permission) to import, export and transit of certain products included
in the single list of goods subject to bans or restrictions on the import or export of the states - members
Customs Union within the Eurasian Economic Community in trade with third countries, approved by
the decision of the Board of the Eurasian Economic Commission on May 16, 2012 , N 45;
     b) technical documentation of encryption (cryptographic) means (view the source code is
not mandatory, the applicant's refusal to present the source code is not grounds for denial of the
conclusion (of permission));
    at) other documents required by the legislation of a Member State.
    15. The issue of detention (of permission) rejects the presence of the following grounds:
    a) failure to provide the applicant the documents specified in paragraph 14 of these
Regulations;
    b) presence of incomplete or inaccurate information in the documents submitted by the
applicant to obtain the opinion (of permission);
    at) other grounds provided by the legislation of a Member State.
Appendix N 1
to the Regulations on the import into the customs territory
Eurasian Economic Union
and exported from the customs territory
Eurasian Economic Union
encryption (cryptographic) means
(form)

Unified Register
notifications about the characteristics of encryption (cryptographic) means and products containing them

room notification Name of product Manufactured goods Publication date of notification Validity Identifier Status
*
Cancellation date
1 2 3 4 5 6 7 8
    * In the column entry is "valid" or "canceled". In case of 7 entries in the column "canceled"
in box 8 indicate the date of making the record in this register. The position is highlighted in color
(shade of gray)
Appendix N 2
to the Regulations on the import into the customs territory
Eurasian Economic Union
and exported from the customs territory
Eurasian Economic Union
encryption (cryptographic) means
(form)

Regulationsof
the notification of the characteristics of encryption (cryptographic) means andproducts containing them

    1. This Regulation establishes the procedure:
    a) filling and design district of ratification of the technical characteristics and
cryptographic encryption (cryptographic) means and products containing them (hereinafter -
notification);
    b) submission of the notification to the public authority of the State - a member of the
Eurasian Economic Union in the area of state (national) security, authorized in accordance with
the law of that State for approval of licenses, issuing opinions (authorization documents) and the
register of notifications (hereinafter referred to as - the agreement of, the Member State Union);
    at) form and presentation of the consent of the Eurasian Economic Commission
(hereinafter - Commission) information about registered notifications;
    g) published on the official Online Union information and telecommunications network
"Internet" (hereinafter referred to as - the official website of the Union, the Internet) a single
register of notifications on the characteristics of encryption (cryptographic) means and products
containing them (hereinafter - a single register of notifications);
    d) cancellation notification.
    2. Notification filled in the form specified in Annex N 3 of the Regulation on the
importation into the customs territory of the Eurasian Economic Union and exported from the
customs territory of the Eurasian Economic Union of encryption (cryptographic) means (appendix
N 9 to the decision of the board of the Eurasian Economic Commission on April 21, 2015 ,
N thirty).
Notification filled in Russian. Allowed Latin letters names technologies, protocols,
cryptographic algorithms and their generally accepted abbreviations, details of the manufacturer
of the goods.
    3. Notification issued by the manufacturer of goods or a person authorized by the
manufacturer of goods (hereinafter - applicants) on the basis of the manufacturer's own evidence
once.
Applicant filled with items 1 - 9 notification.
    4. The notification may be declared information about one type of goods or of a group of
similar products containing in its composition identical encryption (cryptographic) means
(functional finished products) that implement the same cryptographic algorithm having the same
maximum length of working cryptographic key, the same a set of features that when administered
to the same cryptographic key and the same input sequence providing the same output
sequence).
    5. In paragraph 1 the notification specifies a trade, commercial or other traditional name
of the product or group of similar products containing in its composition identical encryption
(cryptographic) means (with a list of specific items), as well as information on trademarks, brands,
models, articles, standards, and other technical and commercial characteristics.
For software version is indicated.
It is also possible to add to the product name of "and spare parts."
Each item of goods from a group of similar products listed on a separate line. After the
name of the goods may be listed on a separate line remarks (for reducible notation).
    6. In paragraph 2 the notification specifies a description and designation of the goods
and the appointment of such a product used in the encryption (cryptographic) functions.
    7. In paragraph 3 the notification shall include the name and address of the legal entity
- the manufacturer of the goods, the location of its head office, telephone and fax numbers and
e-mail addresses and the official website on the Internet (if available).
    8. In paragraph 4, the notification shall contain the following information:
names used encryption (cryptographic) protocols;
name and destination are used in a range of cryptographic algorithms (features), the
maximum length of all used cryptographic keys;
the name and version of the software;
the maximum range of the wireless action without amplification and retransmission in
accordance with the manufacturer's specifications
(in the case of using a cryptographic algorithm (function) in a wireless radio electronic
equipment);
encryption (cryptographic) function blocked by the manufacturer (if available).
The names used in the product of encryption (cryptographic) protocols and algorithms are
specified separately for each performing a specific function.
In the description of cryptographic algorithms (features) on the right in a special cell, the
number of the relevant item (category number) of the N 4 to the Regulations on the import into
the customs territory of the Eurasian Economic Union and exported from the customs territory of
the Eurasian Economic Union of encryption (cryptographic) means (appendix N 9 to the Decision
of the Board of Eurasian Economic Commission on April 2015 21, N 30).
    9. In paragraph 5 the notification shall contain:
a) undeclared functionality of the product (if any), the use of which may occur:
breach of confidentiality, integrity or availability of information processed;
violation of the authentication process;
intervention mechanism for the use of electronic digital signature (e-signature);
b) the presence or absence of opportunities for operational and search activities ("police"
mode).
    10. In paragraph 6, the notification stated expiration date of notification, before which
the manufacturer guarantees the immutability of encryption (cryptographic) functions, in the
format DD.MM.YYYY.
eleven. In paragraph 7, the notification shall contain:
for legal entities - the name, the location of its head office, telephone and fax numbers,
email addresses, and the official site on the Internet (if available), as well as the position, surname,
name and patronymic of the person authorized for the issue of the notification;
for individuals - name, name of the person, the data of the identity document in accordance
with the legislation of a Member State.
The applicant Member State and shall provide information about its registration
(registration authority, registration date, registration number, identification number) in accordance
with the legislation of a Member State.
    12. In paragraph 8, the notification specifies details (date and number) the identity
document for registration notification (power of attorney agreement (contract), and so on. N.) (To
be filled if the notification is made by an authorized person).
    13. In paragraph 9, the notification shall indicate the date of filling the notification in the
format DD.MM.YYYY.
    14. The notification signed by an authorized person for the issue of the notification
indicating the decoding signatures and certified stamp (if available).
    15. The applicant is responsible for the accuracy of any information and documents.
    16. In the event that all of the information does not fit on the blank notification of this
information is indicated on the reverse side of the form and each additional page, with each sheet
of the notification signed by the applicant and certified by the seal (if any).
    17. Software for filling in paragraphs 1 - 8 of notification and forming it into an electronic
form posted on the official website of the Union and shall allow the applicant:
    a) fill in the form of notification in accordance with this Regulation;
    b) to form a printed notification form and print it;
    c) create an electronic copy of the notification in accordance with the structure of the data
file in accordance with Annex N 1;
    g) save generated print and electronic copy of the notification file.
    18. In order to register the applicant in the notification submitted to the agreement of the
cover letter included with the following documents:
    a) 2 copies of the notification, executed in accordance with this Regulation;
    b) an electronic copy of the notification to the electronic medium (CD-ROM, flash
memory) according to the structure of the data file provided by the application N 1 hereto;
    c) a document confirming the authority of the person for the issue of the notification,
certified (legalized) in accordance with the laws of the State of the manufacturer. In the case of
preparation of the document in a foreign language to the original (notarized copy) of a document
supplied certified in accordance with the legislation of a Member State, a translation into the
official language of the Member State, the agreement of which registers notification.
    19. In the case of registration of the notification by the applicant, is the organization of
the manufacturer of the third country, notification should be legalized.
    20. The notification and the documents may be submitted in the form of electronic
document in accordance with the legislation of a Member State.
It allowed the submission of documents in the form of scanned documents signed by
electronic signature ( e- signature ) of the applicant, if the legislation of a Member State.
    21. The consent of the Authority no later than 7 working days from the date of filing the
registration notification registers (refuse to register) notification and submit to the Commission
information on the registered notifications in accordance with the structure of the data file
according to the application N 2.
Matching authorities are responsible for the completeness and accuracy of information on
the registered and canceled notifications.
    22. The Commission no later than 3 working days from the date of receipt of the
information about the registered notifications brings them into a single register of notifications
published on the official website of the Union.
Notification is valid from the date of making information about its registration in a single
register of notifications.
    23. The deadline for registration notification (notification of refusal to register) and
entering data on registered consent of the notifications in a single register of notifications shall
not exceed 10 working days from the date of filing the registration notification of the consent of
the Authority.
    24. The Commission is responsible for the completeness and accuracy of posted on the
official website of the Union of information on the registered and canceled notifications.
    25. On the official website of the Union, users are given the ability to view and search
the data of registered notifications.
    26. In the period from the date of submission of documents for registration of the
notification to the applicant notifying the registration may be amended in the notification of these
changes with the sight of an authorized person for the issue of the notification, at the same time
within the period specified for the notification of registration, begins anew from the date of making
changes to the notification.
    27. In the case of non-notification submitted for registration documents with the
requirements of this Regulation matching authority shall refuse to register a notification.
    28. The consent of the Authority may decide to annul the notification in the following
cases:
    a) the applicant files the application to the agreement of the termination of the notification
indicating the reason;
    b) identification of the consent of the false or incomplete information provided in the
notification;
    c) identification of encryption (cryptographic) functions, not specified in the notification,
or contrast settings of encryption (cryptographic) functions from those indicated in the notification.
    29. In case of cancellation of the agreement of the notification within 3 working days,
inform the Commission thereof.
    30. The action is terminated from the date of notification by making information about its
cancellation in a single register of notifications or the date of its expiration.
Appendix N 1
to the Regulations on the import into the customs territory
Eurasian Economic Union
and exported from the customs territory
Eurasian Economic Union
encryption (cryptographic) means
(form)

Structure
Data file notifications, submitted to the agreement of the states - members of the Eurasian Economic Union

    Data file notifications shall be submitted to the agreement of the states - members of the
Eurasian Economic Union in a format * .xls. Description of the structure of the file is shown in the
table.
Name of structure element Field type The semantic content Obligation
1. Room Character registration number no
2. Name of product Character Product Name Yes
3. Manufactured goods Character manufactured goods Yes
4. Date of notification (1) date format date of registration notification no
5. Validity DD.MM.YYYY
date format br
DD.MM.YYYY
validity
notification
Yes
6. Status (1) logical Status notification is set: Action / canceled no
7. An identifier (2) Character Product ID
(12-digit)
Yes
    (1) To be completed by the consent of the states - members of the Eurasian Economic
Union.
    (2) To be filled in based on the information listed in paragraph 4, notification under the
form specified in Annex N 3 to the Regulations on the import into the customs territory of the
Eurasian Economic Union and exported from the customs territory of the Eurasian Economic
Union of encryption (cryptographic) means (appendix N 9 to the Decision of the College Eurasian
Economic Commission, 2015 April 21, N 30).
    The index value is formed from 12 characters, each of which corresponds to the number
of the list of categories of goods that are of encryption (cryptographic) means or containing in the
structure of encryption (cryptographic) means, technical and cryptographic specifications are
subject to notification under Annex N 4 to the Regulations on the import into the customs territory
of the Eurasian Economic Union and exported from the customs territory of the Eurasian
Economic Union of encryption (cryptographic) means (appendix N 9 to the Decision of the Board
of Eurasian Economic Commission on April 2015 21, N 30). If the serial number is equal to the
character identifier item number specified list, the symbol is assigned a value of one, otherwise
- the value of zero.
    
Appendix N 2
to the Regulation on the notification
of the characteristics of encryption
(cryptographic) facilities
and products containing them

Structure
Data file notifications, submitted to the agreement of the states - members of the Eurasian Economic Union

    The data file of registered notifications submitted the consent of the states - members of
the Eurasian Economic Union in the Eurasian Economic Commission in the format * .xls.
Description of the structure of the file is shown in the table.
The data file of registered notifications contain information about registered and canceled
notifications since the last presentation of the Eurasian Economic Commission and must have
the following name:
    nXX_DD_MM_YYYY.xls,
    where:
    n - an element indicating that this file is a data file recorded on the notifications;
    XX - the country code in accordance with the Classifier of countries of the world (AM -
Armenia, BY - Republic of Belarus, KZ - The Republic of Kazakhstan, RU - Russian Federation);
    DD_MM_YYYY - the date of sending the file to the Eurasian Economic Commission. For
example, a data file on March 2015 registered 15 g. notifications directed the consent of the
Russian Federation shall have the following name: nRU_15_03_2015.xls.
Name of structure element Field type The semantic content Obligation
1. Number character in the
format:
XXNNNNNNNNNN,
where:
the XX-th - the country
code in accordance
with the Classifier of
countries of the world;
NNNNNNNNNN -
sequence number
registration number. The value of the field must be unique Yes
2. Item Name Character Product Name Yes
3. Head manufactured goods Character manufactured goods Yes
4. Date of notification date format
DD.MM.YYYY
date of registration notification Yes
5. Validity date format
DD.MM.YYYY
validity
notification
Yes
6. Identifier Character Product ID (12-digit) Yes
7. Status logical Status notification is set: Action / canceled Yes
8. Date cancellation the date of cancellation of the notification validity
notification
Yes (in case of cancellation)
Appendix N 3
to the Regulations on the import
into the customs territory of the Eurasian
Economic Union and export
from the customs territory of the Eurasian
Economic Union of encryption
(cryptographic) means

The form of the notification of the characteristics of encryption (cryptographic) means and products containing them

 
    It is registered in the register of "____" __________ 20 ___ g.
N __________________
MP _______________________________________ _____________________
(signature of the official consent (Name)
Body)
-------------------------------------------------- -------------------
----
NOTIFICATION
on the characteristics of
_______________________________________________________
(coding (ie creep ograficheskih) and (or)
products containing them, - indicate that apply)
1. Name of product __________________________________________________
______________________________________________________________________
___
2. Appointment of goods
____________________________________________________
______________________________________________________________________
___
3. Information about the manufacturer Product
______________________________________
______________________________________________________________________
___
4. Used cryptographic algorithms (function) N category of
and their purpose: the N 4
┌──────────────────────────────────────────────────────────┐ ┌─────┐
a) │ │ │ │
│ │ └─────┘
│ │ ┌─────┐
b) │ │ │ │
│ │ └─────┘
│ │ ┌─────┐
in) │ │ │ │
└──────────────────────────────────────────────────────────┘ └─────┘
5. The presence in the product functionality is not described in
operational documentation provided by the user _______________
______________________________________________________________________
___
6. The validity of the notification ___ / ___ / _______
7. For information about the applicant
_________________________________________________
______________________________________________________________________
___
8. DocInformation manufacturer, attesting to the authority of the
person
registration notification (if necessary)
_______________________________
______________________________________________________________________
___
9. Date of completion notification ___ / ___ / _______
Accuracy and completeness of the information included in the
notification, confirm:
MP ________________________ ______________________________
(signature of the applicant) (Name)
Appendix N 4
to the Regulations on the import
into the customs territory of the Eurasian
Economic Union and exported from the customs
territory of the Eurasian Economic Union
of encryption (cryptographic) means

List categories of goods which are of encryption (cryptographic) means or containing in the structure of encryption (cryptographic) means, technical and cryptographic specifications are subject to notification

    1. Products containing in its composition of encryption (cryptographic) means, having
any of the following:
    1) a symmetrical cryptographic algorithm using the cryptographic key length not
exceeding 56 bits;
    2) an asymmetric cryptographic algorithm, based on any of the following methods:
factorization integers that do not exceed 512 bits;
calculation of discrete logarithms in a multiplicative group of a finite field, the size of which
does not exceed 512 bits;
discrete logarithm in the group of a finite field other than the field specified in the third
paragraph of this subparagraph, the amount of which does not exceed 112 bits.
Notes: 1. The parity bits are not included in the key length.
    2. The term "cryptography" does not refer to fixed compression techniques or data
encoding.
    2. Products containing encryption (cryptographic) means, having the following limited
functions:
    1) authentication, which includes all aspects of access control where there is no
encryption of files or text except for encryption, which is directly related to the protection of
passwords, personal identification numbers or similar data to prevent unauthorized access;
    2) digital signature (e-signature).
Note. The functions of authentication and digital signature (e-signature) include the
related functions of key distribution.
    3. Encryption (cryptographic) means, which are the software components operating
system, cryptographic capabilities that can not be changed by users, which are designed for
installation by the user without further substantial support provider and technical documentation 
(description of the algorithms of cryptographic transformations, communication protocols, a
description of the interfaces and so on. Etc. .) which is available to the user.
    4. Personal smart cards (smart cards):
    1) The cryptographic capabilities are limited in terms of their use of goods (products)
specified in paragraphs 5 - 8 of this list;
    2) for wide public use, the cryptographic capability is not user and which as a result of a
special design have a limited ability to protect the stored personal data on them.
Note. If the personal smart card (smart card) can perform several functions, the control
status of each function is determined separately.
    5. Receiving equipment for radio broadcast, pay television or similar equipment for
commercial broadcasting in limited audience, without digital encryption except when used solely
for managing the encryption of video or audio channels, send invoices or return information
related to the program providers broadcast.
    6. Equipment where the cryptographic capability is not user specially designed and
limited to allow any of the following ways:
    1) The software is executed in the form of a copy-protected;
    2) access to any of the following:
Copy-protected contents stored only in a readable electronic medium;
information stored in encrypted form on electronic media, which are offered for sale in
identical sets;
    3) copy control audio and video protected by copyright.
    7. Encryption (cryptographic) equipment specially designed and limited for banking use
or money transactions.
Note. Financial transactions include including fees and payment for transport services and
lending.
    8. Portable and mobile radio-electronic means of civil use (eg for use with commercial
civil cellular radiocommunications systems) that are not capable of end encryption (from
subscriber to subscriber).
    9. Wireless electronic equipment, encrypts the information only in the radio channel with
a maximum range of wireless action without amplification and retransmission of less than 400
meters according to the manufacturer's specifications.
    10. Encryption (cryptographic) means used to protect the technological channels of
information and telecommunication systems and networks.
eleven. Goods cryptographic function which is locked by the manufacturer.
    12. Other products that contain encryption (cryptographic) means, other than those
specified in paragraphs 1 - 11 of the list, and meet the following criteria:
    1) are publicly available for sale to the public in accordance with the law of the State - a
member of the Eurasian Economic Union, without limitation of the available range of retail displays
by any of the following:
cash sales;
sale by mail order;
electronic transactions;
telephone sales orders;
    2) encryption (cryptographic) functionality which can not be changed by the user in a
simple manner;
    3) are designed for installation by the user without further substantial support by the
supplier;
    4) technical documentation confirming that the goods comply with the requirements of
subparagraphs 1 - 3 of this paragraph, the manufacturer is placed in the public domain and
submitted, if necessary, the manufacturer (the person authorized by him) by the consent of his
request.
© 2010–2015 MINTEST Contacts Site map
http://www.mintest-russia.com/notification.htm (http://www.mintestrussia.com/notification.htm)

hello world


Contacts

Phone: +7 499 347-18-97
  +7 499 409-63-69
E-mail: info@mintest.ru
Skype: mintest.company
USA office:
Phone: +12396013208
Email: info@mintest.ru
address: 7961 Gladiolus Dr. 104, Fort Myers Florida 33908 ,USA