incubator-odf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rob Weir <robw...@apache.org>
Subject Re: Ready for ODF Toolkit crypto declaration
Date Wed, 15 Feb 2012 15:03:58 GMT
On Tue, Feb 14, 2012 at 10:08 PM, Daisy Guo <daisy.ycguo@gmail.com> wrote:
> Hi, Rob
>
> Are there anything we need to do with US Export Administration
> Regulations (EAR)?
>

That is what we are trying to figure out.  It looks like the
regulations have recently changed and we might not need to file any
paperwork.  But we're still investigating.

-Rob

> Daisy
>
> 2012/2/15 Rob Weir <robweir@apache.org>:
>> If I understand correctly, since we are not including Java Crypto API
>> libraries in our code, we don't need to declare them specifically.
>> But since we're "designed to use" such libraries we need to register
>> the ODF Toolkit as 5D002.
>>
>> Note that we do have our own implementation of PKCS #5, per RFC 2898.
>>  This is a "password-based key derivation function", which is applied
>> prior to encryption in order to convert "weak" passcodes entered by
>> end users into higher entropy ones.   I don't see this as restricted
>> under the export regulations, so I don't think we should declare it.
>>
>> Looking at the process [1] for doing this paperwork, it looks like we
>> need to update this [2] page by updating this [3] source.
>>
>> [1] http://www.apache.org/dev/crypto.html
>> [2] http://www.apache.org/dev/crypto.html
>> [3] http://www.apache.org/licenses/exports/
>>
>> I don't have permissions to update the source XML directly, but I
>> believe it should be updated to include the following fragment.   I
>> have Nick in as the contact, assuming that he will send the
>> declaration per [4].  Once that is done, Devin can check in the
>> encyption/digital signature code, and I can update the README file per
>> [5].
>>
>> Am I missing anything?
>>
>> -Rob
>>
>> [4] http://www.apache.org/dev/crypto.html#notify
>> [5] http://www.apache.org/dev/crypto.html#inform
>>
>>
>>
>>  <Project href="http://incubator.apache.org/odf">
>>  <Name>Apache ODF Toolkit Project</Name>
>>  <Contact><Name>Nick Burch</Name></Contact>
>>  <Product>
>>    <Name>Apache ODF Toolkit</Name>
>>    <Version>
>>      <Names>development</Names>
>>      <ECCN>5D002</ECCN>
>>      <ControlledSource href="https://svn.apache.org/repos/asf/incubator/odf/">
>>        <Manufacturer>ASF</Manufacturer>
>>        <Why>Designed for use with Java Cryptography Extension (JCE)</Why>
>>      </ControlledSource>
>>    </Version>
>>    <Version>
>>      <Names>0.5-incubating and later</Names>
>>      <ECCN>5D002</ECCN>
>>      <ControlledSource
>> href="http://archive.apache.org/dist/incubator/odftoolkit">
>>        <Manufacturer>ASF</Manufacturer>
>>        <Why>Designed for use with Java Cryptography Extension (JCE)</Why>
>>      </ControlledSource>
>>    </Version>
>>  </Product>
>>  </Project>

Mime
View raw message