Restrictions on the import of cryptography
Historically, a number of countries have attempted to restrict the import of cryptography tools. This article aims to keep a record of current restrictions on the import of cryptographic into countries. This should not be confused with restrictions on exporting cryptographic tools out of countries that produce them, which has a different set of motivations and implications for those accused of breaking regulations.
Rationale
Countries may wish to restrict import of cryptography technologies for a number of reasons:
- Cryptography may increase levels of privacy within the country beyond what the government wishes.
- Use of cryptography can enable citizens to hide data from the government.
- Criminals can hide information on their operations.
- Dissidents can anonymously communicate with each other, preventing government from monitoring them.
- Encrypted transactions may hamper attempts to monitor the activities of business within the country.
- Terrorists within the country may use encrypted transmissions to communicate with other members both in and out of the country.
Status by country
The following states are from the GLIC and EPIC reports on Cryptography and Liberty from 1998 and 2000. These used a Green/Yellow/Red system, plus "unknown" to indicate the level of restriction, with green meaning no restriction, yellow meaning some restrictions, and red meaning heavy restrictions. For further details see the report for the appropriate year (indicated in the updated column and linked to from the Status).
Countries where there are no current restrictions on importing cryptographic tools are not listed for the sake of brevity. There may be restrictions on the use of cryptography in countries not listed here, but regulations were not reported in the reference material.
This list is incomplete; notable omissions are Ethiopia and Eritrea, both of which may have restrictions on the import and use of cryptography.
| Country | Status | Updated |
|---|---|---|
| Angola | Unknown | 2000 |
| Armenia | Green/Yellow | 2000 |
| Bahrain | Unknown | 2000 |
| Belarus | Red | 2007 |
| Brunei Darussalam | Yellow/Red | 2000 |
| Cambodia | Unknown | 2000 |
| Czech Republic | Green/Yellow | 2007 |
| China | Red | 2007 |
| Egypt | Yellow | 2007 |
| Ghana | Green | 2007 |
| Hong Kong | Green/Yellow | 2007 |
| Hungary | Green/Yellow | 2007 |
| India | Green/Yellow | 2007 |
| Iran | Red | 2007 |
| Iraq | Red | 2000 |
| Israel | Yellow | 2007 |
| Khazakstan | Red | 2007 |
| Malta | Yellow | 2000 |
| Moldova | Yellow | 2007 |
| Mongolia | Red | 2000 |
| Myanmar (Burma) | Red | 2007 |
| Nepal | Unknown | 2000 |
| Nicaragua | Unknown | 2000 |
| Pakistan | Yellow | 2007 |
| Poland | Green/Yellow | 2007 |
| Russia | Red | 2007 |
| Rwanda | Unclear | 2007 |
| Saudi Arabia | Green | 2007 |
| South Africa | Green/Yellow | 2007 |
| South Korea | Yellow | 2007 |
| Tatarstan | Unknown | 2000 |
| Tunisia | Red | 2007 |
| Turkmenistan | Red | 2000 |
| Ukraine | Yellow | 2007 |
| Uzbekistan | Red | 2000 |
| Vietnam | Yellow | 2007 |
See also
External links
- Cryptography and Liberty 1998, GILC Report
- Crypto-Law survey 2008
- Citrix list of restricted countries - has no explanation of sources of the information or distinction over whether or not the restrictions are on export from certain locations (e.g. USA), or local importation restrictions.