Automate Identification. Find Unknown Encryption.

Encryption has become integral to our daily lives: most modern software uses cryptography to secure data. For example, e-commerce sites routinely encrypt credit card numbers and customer data. The U.S. Federal Government enforces strict laws governing the export of software containing encryption. These are intended to protect military secrets and to catch encryption used for harmful purposes such as to hide dangerous communications from law officials.

How can you ensure your software is compliant with current export regulations?

• Automate Encryption Identification. To comply with export regulations, encryption in your code needs to be identified. Manually finding encryption code is complicated and time consuming, especially if the code is of third-party origin. Automating the process saves time and reduces business risks, such as lost revenue from delayed shipments.

• Automate Compliance Support. The U.S. Federal Government requires software developers to comply with export laws. In practice, implementing and enforcing such policies can be difficult. The simplest approach is to automate encryption validation as part of your regular build cycle so appropriate corrections can be made quickly.

• Know What You Need to Deliver. Finding out what is legally required and then gathering all of the required technical information about your software cryptography can take an enormous amount of time and expensive expertise. Employing an automated process to help complete the requisite U.S. export documents speeds delivery.

Know Your Code™. Black Duck Software offers the world’s first and only solution specifically designed to facilitate encryption export compliance management for software and electronic devices containing software. Companies worldwide depend on Black Duck solutions to analyze source code and identify cryptography within their code in order to more quickly and easily comply with government licensing and documentation requirements for distributing software internationally. Let us help you gain competitive advantage by bringing your software or software-enabled products to market without undue delay.

How can you find out more information?

• Learn how Black Duck exportIP can enable your organization to find, identify and resolve encryption issues in your software and automate many aspects of Federal encryption compliance procedures.

• Uncover why you need to identify all of the encryption functions in your software – and the challenge that poses. Download the whitepaper, A Guide to Software Encryption Export Compliance.

• Ben Flowe, the export/import compliance team leader at Berliner, Corcoran & Rowe, LLP in Washington, DC explains how to approach classification of products with encryption functions by applying the current Export Administration Regulations (EAR) provisions, from the least restrictive through the most restrictive controls. For more information, download the whitepaper, Software Encryption Export Considerations.