DoktorBrot
(Just in Town)
2016-09-30 11:38 AM
Export Control Classification for KiXtart

Hi,

I couldn't find anything about the export classification of KiXtart. No ECCN number or any other related information. How am I supposed to know if I'm breaking US law by using the software within a product that is shipped to different countries?

KiXtart is not an open source software, so I can't check if it contains functions that may be subject to the EAR.

Ussually there are some basic rules which can be followed to conclude the ECCN of a software:

1) Was the software developed by a US citizen or in the USA?
2) Does it contain any kind of encryption/decryption functionality besides
- Authentication
- Hashing

Software that doesn't apply to 1) is not subject to EAR and can be classified as ECCN = N. If it apllies to 1) but not to 2), it can be classified as ECCN = EAR99.
If 1) and 2) apply, the supported encryption depth is essential.

x<64 bit depth and symetcric encryption algorith => ECCN = 5D992
x<256 bit depth and asymetcric encryption algorith => ECCN = 5D992
else ECCN = 5D002


I hope sombody can help me to find the correct classification number for KiXtart. Maybe there are also other people or companies who need to know this too?

With best regards
DoktorBrot


Ruud van Velsen
(Hey THIS is FUN)
2016-10-04 03:11 PM
Re: Export Control Classification for KiXtart

Hi there,

interesting question... hadn't seen that before.

KiXtart was developed by me, an EU-citizen, and it does not contain any proprietary encryption/decryption technology. (The encryption/decryption of tokenized scripts leverages Windows' built-in crypto functionality.)

Hope this helps!

Ruud


DoktorBrot
(Just in Town)
2016-11-23 03:50 PM
Re: Export Control Classification for KiXtart

Hi Ruud,

first, I have to appologize that I haven't responded earlier, especially because your answer is very helpful for me.

Thank you very much.

Based on your statement KiXtart should not be "subject to EAR" or in other words ECCN:N.

With best regards
DoktorBrot


Sealeopard
(KiX Master)
2017-01-11 05:33 AM
Re: Export Control Classification for KiXtart

Well, the next problem is that you seem to integrate KiXtart into another product. It is unclear whether that other software is a commercial product. However, you may want to read the "Disclaimer and distribution information" section of the KiXtart manual and get Ruud's consent before distribution.