Document ID: chunk:federal_register_of_legislation:F2024L01024:front:0:p179
Version: federal_register_of_legislation:F2024L01024
Segment Type: other
Provision Reference: 
Character Range: 519481–522787

specified by 5A002.a. or 5D002.c.1., and not released by the Cryptography Note (Note 3 in Category 5 – Part 2); or
2. Enabling, by means of "cryptographic activation", additional functionality specified by 5A002.a. of an item already specified by Category 5 – Part 2.
5. A. 002. c. Designed or modified to use or perform "quantum cryptography":

           Technical Note:
           For the purposes of 5A002.c., "quantum cryptography" is also known as Quantum Key Distribution (QKD).
5. A. 002. d. Designed or modified to use cryptographic techniques to generate channelising codes, scrambling codes or network identification codes, for systems using ultra‑wideband modulation techniques and having any of the following:
              1. A bandwidth exceeding 500 MHz; or
              2. A "fractional bandwidth" of 20% or more;
5. A. 002. e. Designed or modified to use cryptographic techniques to generate the spreading code for "spread spectrum" systems, not specified by 5.A.002.d., including the hopping code for "frequency hopping" systems.

NON‑CRYPTOGRAPHIC "INFORMATION SECURITY"
5. A. 003. Systems, equipment and components, for non‑cryptographic "information security", as follows:

            1. Communications cable systems designed or modified to use mechanical, electrical or electronic means to detect surreptitious intrusion;

                Note: 5A003.a. applies only to physical layer security. For the purpose of 5.A.3.a., the physical layer includes Layer 1 of the Reference Model of Open Systems Interconnection (OSI) (ISO/IEC 7498‑1).

           b. Specially designed or modified to reduce the compromising emanations of information‑bearing signals beyond what is necessary for health, safety or electromagnetic interference standards.

DEFEATING, WEAKENING OR BYPASSING "INFORMATION SECURITY"
5. A. 004. Systems, equipment and components, for defeating, weakening or bypassing "information security", as follows:

           a. Designed or modified to perform 'cryptanalytic functions'.

                Note: 5A004.a. includes systems or equipment, designed or modified to perform 'cryptanalytic functions' by means of reverse engineering.

           Technical Note:

           For the purposes of 5A004.a., 'cryptanalytic functions' are functions designed to defeat cryptographic mechanisms in order to derive confidential variables or sensitive data, including clear text, passwords or cryptographic keys.
5. A. 004. b. Items, not specified by 4A005 or 5A004.a., designed to perform all of the following:
1. 'Extract raw data' from a computing or communications device; and
2. Circumvent "authentication" or authorisation controls of the device, in order to perform the function described in 5A004.b.1.
Technical Note:
For the purposes of 5A004.b.1., 'extract raw data' from a computing or communications device means to retrieve binary data from a storage medium, e.g. RAM, flash or hard disk, of the device without interpretation by the device's operating system or filesystem.
Note 1: 5A004.b. does not apply to systems or equipment specially designed for the "development" or "production" of a computing or communications device.
Note 2: 5A004.b. does not include:
                   a. Debuggers, hypervisors;
                   b. Items limited to logical data