going to china? bringing technology? careful there…

This story in Wired serves as a good reminder that export control laws, particularly U.S. export control laws, do have teeth. In short: a retired US professor was sentenced to four years in jail for sharing his research with graduate students in China. Apparently, the U.S. government felt that the research he shared was restricted technical data, disclosure of which would put U.S. national security at risk.

In this particular case, the U.S. State Department had apparently warned him, but he disregarded the warnings and went ahead anyway. So, for most folks, it’s unlikely to be much of a risk, unless of course the State Department calls you up. That being said, if you are planning to travel to and/or do business in China, Iran, etc., it might be a good idea to think about what you might not want to bring over with you on your laptop, particularly if you will be presenting any of it to citizens of those countries or leaving anything there.

Unfortunately, export controls are not exactly straightforward, particularly those dealing with the type of things you can’t export. In Canada, this is particularly the for the what’s described as “dual-use” group. This group describes things that aren’t necessarily used for sensitive purposes, but could be, hence the “dual-use” moniker.

Just as an example, take a look at Category 5 – Part 2 of the Canadian Export Control List, which deals with cryptographic technology. Not exactly an easy read. Though thankfully over the years they have put in some common sense carve-outs. You’ll find them in the tiny, tiny notes at the beginning and end. Then there’s the U.S. Export Administration Regulations, which makes the Canadian requirements look comparatively straightforward.

canadian export controls now apply to quantum cryptography

Well. Not like this is going to affect a huge number of companies in Canada, but one of my colleagues brought to my attention at an internal meeting the fact that the Canadian government has updated its export control list – i.e. the list of things that you can’t ship out of Canada without a permit. A brief release from the gov’t summarizes the additions, which now include quantum cryptography goods and technologies. D-Wave might want to be pay attention to this, though they’re not in the area of quantum cryptography per se. That being said, I’m a bit surprised that its only quantum cryptography that’s on the list. Given the potential impact that quantum computing technology may have on standard cryptographic protections (i.e. being able to render it more or less useless, assuming the predictions on its horsepower come to pass) I would have thought quantum computing would have also been added on in some form.