I'm not a lawyer, the following is not legal advice, and I may be mixing
apples (ITAR) with oranges (EAR). In my understanding, the only export
concerns we _might_ have is dual-use cryptography, for which we rely on
If you go to bouncycastle's wiki (http://bouncycastle.org/wiki/display/JA1/Frequently+Asked+Questions
scroll to #11, the ECCN is now 5D992.c. In short, in my non-legal opinion,
you should be good, but check with your lawyers.
On Mon, Dec 9, 2019 at 5:37 PM Tom Barber <[EMAIL PROTECTED]> wrote: