Page 1 of 1 1
Topic Options
#211961 - 2016-09-30 11:38 AM Export Control Classification for KiXtart
DoktorBrot Offline
Just in Town

Registered: 2016-09-30
Posts: 2
Loc: Germany
Hi,

I couldn't find anything about the export classification of KiXtart. No ECCN number or any other related information. How am I supposed to know if I'm breaking US law by using the software within a product that is shipped to different countries?

KiXtart is not an open source software, so I can't check if it contains functions that may be subject to the EAR.

Ussually there are some basic rules which can be followed to conclude the ECCN of a software:

1) Was the software developed by a US citizen or in the USA?
2) Does it contain any kind of encryption/decryption functionality besides
- Authentication
- Hashing

Software that doesn't apply to 1) is not subject to EAR and can be classified as ECCN = N. If it apllies to 1) but not to 2), it can be classified as ECCN = EAR99.
If 1) and 2) apply, the supported encryption depth is essential.

x<64 bit depth and symetcric encryption algorith => ECCN = 5D992
x<256 bit depth and asymetcric encryption algorith => ECCN = 5D992
else ECCN = 5D002


I hope sombody can help me to find the correct classification number for KiXtart. Maybe there are also other people or companies who need to know this too?

With best regards
DoktorBrot

Top
#211990 - 2016-10-04 03:11 PM Re: Export Control Classification for KiXtart [Re: DoktorBrot]
Ruud van Velsen Moderator Offline
Developer
*****

Registered: 1999-05-06
Posts: 391
Loc: Amsterdam, The Netherlands
Hi there,

interesting question... hadn't seen that before.

KiXtart was developed by me, an EU-citizen, and it does not contain any proprietary encryption/decryption technology. (The encryption/decryption of tokenized scripts leverages Windows' built-in crypto functionality.)

Hope this helps!

Ruud

Top
#212130 - 2016-11-23 03:50 PM Re: Export Control Classification for KiXtart [Re: Ruud van Velsen]
DoktorBrot Offline
Just in Town

Registered: 2016-09-30
Posts: 2
Loc: Germany
Hi Ruud,

first, I have to appologize that I haven't responded earlier, especially because your answer is very helpful for me.

Thank you very much.

Based on your statement KiXtart should not be "subject to EAR" or in other words ECCN:N.

With best regards
DoktorBrot

Top
#212208 - 2017-01-11 05:33 AM Re: Export Control Classification for KiXtart [Re: DoktorBrot]
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11164
Loc: Boston, MA, USA
Well, the next problem is that you seem to integrate KiXtart into another product. It is unclear whether that other software is a commercial product. However, you may want to read the "Disclaimer and distribution information" section of the KiXtart manual and get Ruud's consent before distribution.
_________________________
There are two types of vessels, submarines and targets.

Top
Page 1 of 1 1


Moderator:  Lonkero, ShaneEP, Jochen, Radimus, Glenn Barnas, Allen, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
1 registered (Allen) and 466 anonymous users online.
Newest Members
gespanntleuchten, DaveatAdvanced, Paulo_Alves, UsTaaa, xxJJxx
17864 Registered Users

Generated in 0.093 seconds in which 0.064 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org