Restrictions on the import of cryptography

From Wikipedia

Historically, a number of countries have attempted to restrict the import of cryptography tools. This article aims to keep a record of current restrictions on the import of cryptographic into countries. This should not be confused with restrictions on exporting cryptographic tools out of countries that produce them, which has a different set of motivations and implications for those accused of breaking regulations.

Rationale

Countries may wish to restrict import of cryptography technologies for a number of reasons:

• Cryptography may increase levels of privacy within the country beyond what the government wishes.
• Use of cryptography can enable citizens to hide data from the government.
• Criminals can hide information on their operations.
• Dissidents can anonymously communicate with each other, preventing government from monitoring them.
• Encrypted transactions may hamper attempts to monitor the activities of business within the country.
• Terrorists within the country may use encrypted transmissions to communicate with other members both in and out of the country.

Status by country

The following states are from the Global Internet Liberty Coalition (GLIC) and Electronic Privacy Information Center (EPIC) reports on Cryptography and Liberty from 1998 and 2000. These used a Green/Yellow/Red system, plus "unknown" to indicate the level of restriction, with green meaning no restriction, yellow meaning a license is required to import, and red meaning a total ban. Where "unknown" is reported, readers are encouraged to seek further advice before importing any cryptography, and asked to update this page with their findings. For further details see the report for the appropriate year (indicated in the updated column and linked to from the Status).

Countries where there are no current restrictions on importing cryptographic tools are not listed for the sake of brevity. There may be restrictions on the use of cryptography in countries not listed here, but regulations were not reported in the reference material. Countries which were previously listed as Unknown, Red or Yellow, but have since changed to Green *are* listed here.

This list is incomplete; notable omissions are Ethiopia and Eritrea, both of which may have restrictions on the import and use of cryptography.

See also

• Export of cryptography

External links

• Cryptography and Liberty 1998, GILC Report
• Crypto-Law survey 2008
• Citrix list of restricted countries - has no explanation of sources of the information or distinction over whether or not the restrictions are on export from certain locations (e.g. USA), or local importation restrictions.