BXA Press Release on New Regs

[shapj@us.ibm.com]

> "Secure" is "Orange Book" B3 or A1 or capable of
> achieving B3 or A1.

Not quite.  Secure is anything better than B2.  This means that adding B3
features selectively to a B2 platform renders it non-exportable, though
there is a gray zone.

The relevant regs are in Supplement 1 to part 774
      CATEGORY 5 - TELECOMMUNICATIONS AND "INFORMATION SECURITY"
                   Part 2 - "Information Security"
              A.  SYSTEMS, EQUIPMENT AND COMPONENTS

5A002 A.6

You can find it at http://w3.access.gpo.gov/bxa/ear/ear_data.html,  under
Category 5 part 2.

Jonathan S. Shapiro, Ph. D.
Research Staff Member
IBM T.J. Watson Research Center
Email: shapj@us.ibm.com
Phone: +1 914 784 7085  (Tieline: 863)
Fax: +1 914 784 6576