Restrictions on the import of cryptography

Countries may wish to restrict import of cryptography technologies for a number of reasons:

• Imported cryptography may have backdoors or security holes (e.g. the FREAK vulnerability), intentional or not, which allows the country or group who created the backdoor technology, for example the National Security Agency (NSA), to spy on persons using the imported cryptography; therefore the use of cryptography is restricted to that which the government thinks is safe, or which it develops itself.
• Citizens can anonymously communicate with each other, preventing any external party from monitoring them.
• Encrypted transactions may impede external entities to control the conducting of business.
• Cryptography may sometimes increase levels of privacy within the country beyond what the government wishes.

The Electronic Privacy Information Center and Global Internet Liberty Campaign reports use a color code to indicate the level of restriction, with the following meanings:

• Green: No restriction
• Yellow: License required for importation
• Red: Total ban

• Export of cryptography

• Cryptography and Liberty 1998, GILC Report
• Crypto-Law survey 2013