3

According to U.S. Export and Import laws, any device that has a minimum level of encryption is considered as falling under munitions type laws.

Does Apple’s latest OS contain that level? And if it does, has anyone been questioned or convicted of reentering the U.S. with the same device?

I ask because at various international meetings, participants are warned to NOT travel with laptop utilizing “strong” encryption.

S.L. Barth
  • 5,486
  • 8
  • 38
  • 47

2 Answers2

5

According to the Export Import laws, any device that has a minimum level of encryption is considered as falling under munitions type laws.

Let's assume you're talking about the US, here, because obviously this is going to differ from nation to nation (see the Crypto Law survey map, for example). And even within a given area, Crypto is one area where the law has had difficulty keeping up and often defaults to a more relaxed state in the lack of better guidance.

If you read the summary of relaxations to the Export Administration Regulations, you'll see it's not as clear cut as you might think. In effect, the US no longer restricts the export of software (except to Terrorist Nations) based on crypto strength. (See also Bernstein vs. DOJ, which was an intentional test of the rules)

Does apple's latest oss contain that level, and if they do, has anyone been questioned or convicted of reentering the us with the same device?

I'm not aware of any examples where a laptop was confiscated by the US due to the level of crypto on a commercially available OS. Why would they bother using such a troublesome justification, when they can confiscate it on a whim and demand the passwords with no justification necessary?

Traveling to other countries is much more of a problem. I have read that France, in particular, has been known to confiscate laptops with modern OSes that support strong encryption. Especially if that modern OS happens to be on a modern, expensive, sexy laptop. The kind that the customs agent wants for Christmas.

gowenfawr
  • 71,975
  • 17
  • 161
  • 198
3

In theory, yes, it's munitions grade. However, the level for encryption to be considered "munitions grade" is 64 bits, which is considered insecure by modern standards. Furthermore, the restrictions are massively relaxed from the 90s - essentially just "if you use encryption in a product you sell overseas, tell the government", unless you're selling it specifically for military use, in which some extra rules apply, just as with selling weaponry.

Don't know if anyone has been questioned or convicted for it, but I suspect that it wouldn't be used as a sole reason - think Al Capone being arrested for tax evasion.

Matthew
  • 27,233
  • 7
  • 87
  • 101