我的应用程序是否使用加密（仅钥匙串）？

Question

在我的应用程序中，我使用 iOS 钥匙串来存储密码，仅此而已。我应该在 iTunes Connect 上回答关于 "Export Compliance — Encryption" 的 2 个问题？

您的应用程序是否设计为使用加密技术或是否包含或结合密码学？（Select 是的，即使您的应用只是利用 iOS 或 OS X 中可用的加密。）Yes/No
您的应用是否符合 U.S 第 2 部分第 5 类中规定的任何豁免条件。出口管理条例？ Yes/No

Answer 1

截至 2015 年年中的相关位：

https://www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items

这描述了加密导出内容。其中一件重要的事情是 "Note 4".

https://www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items#Three

Note 4: Category 5, Part 2 does not apply to items incorporating or using "cryptography" and meeting all of the following:

(a) The primary function or set of functions is not any of the following:
     (1) "Information security";
     (2) A computer, including operating systems, parts and components therefor;
     (3) Sending, receiving or storing information (except in support of entertainment, mass commercial broadcasts, digital rights
          management or medical records management); or
     (4) Networking (includes operation, administration, management and provisioning);
(b) The cryptographic functionality is limited to supporting their primary function or set of functions; and
(c) When necessary, details of the items are accessible and will be provided, upon request, to the appropriate authority in the exporter’s
     country in order to ascertain compliance with conditions described in paragraphs (a) and (b) above.

但是还有这个：

http://www.bis.doc.gov/index.php/policy-guidance/encryption/encryption-faqs

Examples of items that are excluded from Category 5, Part 2 by Note 4 include, but are not limited to, the following:   

    Consumer applications.  Some examples:
    piracy and theft prevention for software or music;
    music, movies, tunes/music, digital photos – players, recorders and organizers
    games/gaming – devices, runtime software, HDMI and other component interfaces, development tools
    LCD TV, Blu-ray / DVD, video on demand (VoD), cinema, digital video recorders (DVRs) / personal video recorders (PVRs) – devices, on-line media guides, commercial content integrity and protection, HDMI and other component interfaces (not videoconferencing);
    printers, copiers, scanners, digital cameras, Internet cameras – including parts and sub-assemblies
    household utilities and appliances

综上所述：如果您的应用程序的主要功能不是密码学，并且您使用密码学只是为了传输游戏信息或只是为了登录，那么您的应用程序将不受出口法的管制。

但我不是律师，如果您真的很担心，请咨询律师。 Apple 放弃了对此进行检查的任何责任。如果你说 "no" 而你错了，那是你的问题，而不是他们的问题。

我的应用程序是否使用加密（仅钥匙串）？

Is my application using encryption (only keychain)?

keychain

ios

app-store-connect