with any of the following components:

• symmetric cryptographic algorithm using a cryptographic key with a length not exceeding 56 bits; or
• asymmetric cryptographic algorithm based on any of the following methods:

а) on the factorization of integers, the size of which does not exceed 512 bits;

b) on the calculation of discrete logarithms in the multiplicative group of a finite field of size not exceeding 512 bits; or

c) on a discrete logarithm in a group, different from the size named in the above subparagraph "b", not exceeding 112 bits.

Note.

1. Parity bits are not included in the key length.
2. The term "cryptography" does not refer to fixed methods of compressing or encoding data.

а) authentication, which includes all aspects of access control, where there is no encryption of files or texts, with the exception of encryption, which is directly related to the protection of passwords, personal identification numbers or similar data to protect against unauthorized access;

b) electronic digital signature.

Note. Authentication and electronic digital signature functions include an associated key distribution function.

Tools that are components of software operating systems, the cryptographic capabilities of which cannot be changed by users, which are developed for installation by the user independently without further substantial support from the supplier and technical documentation (description of algorithms for cryptographic transformations, interaction protocols, description of interfaces, etc.) for which is available

а) cryptographic capabilities of which are limited to use in equipment or systems specified in clauses 5 - 8 of this list; or

b) for widespread public use, the cryptographic capabilities of which are not available to the user and which, as a result of special development, have limited possibilities for protecting the personal information stored on them.

Note. If a smart card can perform multiple functions, then the monitoring status of each of the functions is determined separately.

Except when encryption is solely used to manage video or audio channels and send invoices or return program-related information to broadcast providers

Specially designed and limited to use any of the following:
а) the software is executed in a copy-protected form;

b) access to any of the following:

• copy-protected content stored only on read-only media;
• information stored in encrypted form on media when these media are offered for sale to the public in identical sets;

c) copyright control of audio and video information protected by copyright

Note. Financial transactions include fees and charges for transport services and loans

For example, for use in commercial civil cellular radio systems that are not capable of end-to-end encryption (i.e. subscriber to subscriber)

Encrypting information only in a radio channel with a maximum wireless range without amplification and retransmission less than 400 m in accordance with the manufacturer's specifications