PART A

This Annex comprises all goods and technology listed in Annex I to Regulation (EC) No 428/2009, as defined therein, except the following: Item from Annex I to Regulation (EC) No 428/2009 Description 5A002 "Information security" systems, equipment and components therefor, as follows: a. Systems, equipment, application specific "electronic assemblies", modules and integrated circuits for "information security", as follows and other specially designed components therefor: N.B.: For the control of Global Navigation Satellite Systems (GNSS) receiving equipment containing or employing decryption (i.e., GPS or GLONASS), see 7A005. 1. Designed or modified to use "cryptography" employing digital techniques performing any cryptographic function other than authentication or digital signature and having any of the following: Technical Notes: 1. Authentication and digital signature functions include their associated key management function. 2. Authentication includes all aspects of access control where there is no encryption of files or text except as directly related to the protection of passwords, Personal Identification Numbers (PINs) or similar data to prevent unauthorised access. 3. "Cryptography" does not include "fixed" data compression or coding techniques. Note: 5A002.a.1. includes equipment designed or modified to use "cryptography" employing analogue principles when implemented with digital techniques. a. A "symmetric algorithm" employing a key length in excess of 56 bits; or b. An "asymmetric algorithm" where the security of the algorithm is based on any of the following: 1. Factorisation of integers in excess of 512 bits (e.g., RSA); 2. Computation of discrete logarithms in a multiplicative group of a finite field of size greater than 512 bits (e.g., Diffie-Hellman over Z/pZ); or 3. Discrete logarithms in a group other than mentioned in 5A002.a.1.b.2. in excess of 112 bits (e.g., Diffie-Hellman over an elliptic curve); 5D002 "Software" as follows: a. "Software" specially designed or modified for the "use" of equipment specified in 5A002.a.1 or "software" specified in 5D002.c.1; Specific "software", as follows: 1. "Specific Software" having the characteristics, or performing or simulating the functions of the equipment, specified in 5A002.a.1; Note: 5D002 does not control "software" as follows: a. "Software" required for the "use" of equipment excluded from control by the Note to 5A002; b. "Software" providing any of the functions of equipment excluded from control by the Note to 5A002. 5E002 "Technology" according to the General Technology Note for the "use" of equipment specified in 5A002.a.1 or "software" specified in 5D002.a. or 5D002.c.1 of this list.

← ALLEGATO I · All articles · anx_I__cpt_1__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-10 · Text as adopted (Official Journal); later amendments are not incorporated in this text.