Home >Policies and Regulations >Encryption >Guidance

COMMERCIAL ENCRYPTION EXPORT CONTROLS

-- Guidance --

To obtain an authorization to export commercial encryption items, you will have to submit a review request, license application or notification, depending on the type of encryption and the end-users. You must use a BIS Form 748P, the Multipurpose Application Form (either electronically through "SNAP-R" or in paper form) to apply for a classification request or export license.

Additionally, the documents below provide step-by-step instructions on how to submit notifications, or fill out BIS 748P form to receive eligibility to export under License Exception ENC or KMI or an export license.

Notifications

Source Code ("Publicly Available")

Beta Test Software

NLR

  • mass market products with symmetric key lengths equal to or less than 64-bits
  • non-mass market products with symmetric key lengths equal to or less than 56-bits and asymmetric key exchanges equal to or less than 512-bits.
  • key management products with equal to or less than 512-bit asymmetric or equal to or less than 112-bit elliptic curve algorithms.

Encryption Review Requests

Greater than 64-bit "Mass Market"

License Exception ENC

License Exception KMI

License Applications

Encryption Licensing Arrangement (ELA)

Individual License (ILs)

 

Charts

The following chart will help you understand which authorizations may be used to export encryption items. This chart is not all inclusive and is only meant as general guidance for exporters. Please refer to the Export Administration Regulations (EAR) for more detail.

Encryption License Exception Chart - Lists the license exceptions that are most applicable to encryption items.


 

 

Semiannual Reporting Forms [Parts 740.17 and 742.15]
BIS-742R (pdf)| BIS-742S (pdf)

 

 

FOIA | Disclaimer | Privacy Policy | Information Quality
Department of Commerce
| BIS Jobs | No FEAR Act | USA.gov | Contact Us