This is historical material, "frozen in time." The web site is no longer updated and links to external web sites and some internal pages will not work.
THE SECRETARY OF STATE
THE SECRETARY OF THE TREASURY
THE SECRETARY OF DEFENSE
THE ATTORNEY GENERAL
THE SECRETARY OF COMMERCE
UNITED STATES TRADE REPRESENTATIVE
DIRECTOR OF THE OFFICE OF MANAGEMENT AND BUDGET
CHIEF OF STAFF TO THE PRESIDENT
DIRECTOR OF CENTRAL INTELLIGENCE
DIRECTOR, FEDERAL BUREAU OF INVESTIGATION
DIRECTOR, NATIONAL SECURITY AGENCY
ASSISTANT TO THE PRESIDENT FOR NATIONAL
SECURITY AFFAIRS
ASSISTANT TO THE PRESIDENT FOR ECONOMIC POLICY
ASSISTANT TO THE PRESIDENT FOR SCIENCE AND
TECHNOLOGY POLICY
SUBJECT: Encryption Export Policy
Encryption products, when used outside the United States, can
jeopardize our foreign policy and national security interests.
Moreover, such products, when used by international criminal
organizations, can threaten the safety of U.S. citizens here
and abroad, as well as the safety of the citizens of other
countries. The exportation of encryption products accordingly
must be controlled to further U.S. foreign policy objectives,
and promote our national security, including the protection of
the safety of U.S. citizens abroad. Nonetheless, because of
the increasingly widespread use of encryption products for the
legitimate protection of the privacy of data and communications
in nonmilitary contexts; because of the importance to U.S.
economic interests of the market for encryption products;
and because, pursuant to the terms set forth in the Executive
order entitled Administration of Export Controls on Encryption
Products (the "new Executive order") of November 15, 1996,
Commerce Department controls of the export of such dual-use
encryption products can be accomplished without compromising
U.S. foreign policy objectives and national security interests,
I have determined at this time not to continue to designate such
encryption products as defense articles on the United States
Munitions List.
Accordingly, under the powers vested in me by the Constitution
and the laws of the United States, I direct that:
Encryption products that presently are or would be
designated in Category XIII of the United States Munitions
List and regulated by the Department of State pursuant to
the Arms Export Control Act (22 U.S.C. 2778 et seq.) shall
be transferred to the Commerce Control List, and regulated
by the Department of Commerce under the authority conferred
in Executive Order 12924 of August 19, 1994 (as continued on
August 15, 1995, and August 14, 1996), Executive Order 12981
of December 5, 1995, and the new Executive order except
that encryption products specifically designed, developed,
configured, adapted, or modified for military applications
(including command, control, and intelligence applications),
shall continue to be designated as defense articles, shall
remain on the United States Munitions List, and shall continue
to be controlled under the Arms Export Control Act. The
transfer described in this paragraph shall be effective upon
the issuance of final regulations (the "Final Regulations")
implementing the safeguards specified in this directive and
in the new Executive order.
The Final Regulations shall specify that the encryption
products specified in section 1 of this memorandum shall be
placed on the Commerce Control List administered by the
Department of Commerce. The Department of Commerce shall,
to the extent permitted by law, administer the export of such
encryption products, including encryption software, pursuant
to the requirements of sections 5 and 6 of the former Export
Administration Act (50 U.S.C. App. 2405 and 2406), and the
regulations thereunder, as continued in effect by Executive
Order 12924 of August 19, 1994 (continued on August 15, 1995,
and on August 14, 1996), except as otherwise indicated in or
modified by the new Executive order, Executive Order 12981 of
December 5, 1995, and any Executive orders and laws cited
therein.
The Final Regulations shall provide that encryption
products described in section 1 of this memorandum can be
licensed for export only if the requirements of the controls
of both sections 5 and 6 of the former Export Administration
Act (50 U.S.C. App. 2405 and 2406), and the regulations
thereunder, as modified by the new Executive order, Executive
Order 12981 of December 5, 1995, and any Executive orders
and laws cited therein, are satisfied. Consistent with
section 742.1(f) of the current Export Administration
Regulations, the Final Regulations shall ensure that a license
for such a product will be issued only if an application can
be and is approved under both section 5 and section 6. The
controls on such products will apply to all destinations.
Except for those products transferred to the Commerce Control
List prior to the effective date of the Final Regulations,
exports and reexports of encryption products shall initially be
subject to case-by-case review to ensure that export thereof
would be consistent with U.S. foreign policy objectives and
national security interests, including the safety of U.S.
citizens. Consideration shall be given to more liberalized
licensing treatment of each such individual product after
interagency review is completed. The Final Regulations shall
also effectuate all other specific objectives and directives set
forth in this directive.
Because encryption source code can easily and mechanically
be transformed into object code, and because export of such
source code is controlled because of the code's functional
capacity, rather than because of any "information" such code
might convey, the Final Regulations shall specify that
encryption source code shall be treated as an encryption
product, and not as technical data or technology, for export
licensing purposes.
All provisions in the Final Regulations regarding
"de minimis" domestic content of items shall not apply with
respect to the encryption products described in paragraph 1
of this memorandum.
The Final Regulations shall, in a manner consistent with
section 16(5)(C) of the EAA, 50 U.S.C. App. 2415(5)(C), provide
that it will constitute an export of encryption source code
or object code software for a person to make such software
available for transfer outside the United States, over radio,
electromagnetic, photooptical, or photoelectric communications
facilities accessible to persons outside the United States,
including transfer from electronic bulletin boards and Internet
file transfer protocol sites, unless the party making the
software available takes precautions adequate to prevent the
unauthorized transfer of such code outside the United States.
Until the Final Regulations are issued, the Department of
State shall continue to have authority to administer the export
of encryption products described in section 1 of this memorandum
as defense articles designated in Category XIII of the United
States Munitions List, pursuant to the Arms Export Control Act.
Upon enactment of any legislation reauthorizing the
administration of export controls, the Secretary of Defense,
the Secretary of State, and the Attorney General shall reexamine
whether adequate controls on encryption products can be
maintained under the provisions of the new statute and advise
the Secretary of Commerce of their conclusions as well as any
recommendations for action. If adequate controls on encryption
products cannot be maintained under a new statute, then such
products shall, where consistent with law, be designated or
redesignated as defense articles under 22 U.S.C. 2778(a)(1),
to be placed on the United States Munitions List and controlled
pursuant to the terms of the Arms Export Control Act and the
International Traffic in Arms Regulations. Any disputes
regarding the decision to designate or redesignate shall be
resolved by the President.