AES-256 加密 &Apple iTunes 出口限制 [英] AES-256 encryption & Apple iTunes export restrictions

问题描述

我有一个非常大的问题.

I have a really big problem.

我开发了 3 个应用程序 2 个用于 IOS 和 1 个用于 mac osx 使用 RNCryptor 加密文件(witch 是一个 CCCryptor(AES 加密)包装器).申请被拒绝了两次，他们在解决中心把这个发给我(两次):

I developed 3 applications 2 for IOS and 1 for mac osx to encrypt files using RNCryptor (witch is a CCCryptor (AES encryption) wrappers). The applications was rejected twice, and they send this to me in the resolution center(twice):

----- PLA 2.3 -----

----- PLA 2.3 -----

我们发现您的应用程序描述声明它加密数据.

We found that your Application Description states that it encrypts data.

但是，您的应用程序没有出口合规性，这不会根据需要遵守 iOS 开发者计划许可协议根据 App Store 审核指南.

However, your app does not have Export Compliance, which does not comply with the iOS Developer Program License Agreement, as required by the App Store Review Guidelines.

iOS 开发者计划许可协议的第 2.3 节规定，

Section 2.3 of the iOS Developer Program License Agreement specifies,

您证明 (i) 任何许可应用程序均不包含、使用或支持任何数据加密或密码功能；或 (ii) 在任何许可应用程序包含、使用或支持任何此类数据加密或加密功能，您将在请求，向 Apple 提供您的加密注册的 PDF 副本编号 (ERN) 或出口分类裁决 (CCATS)美国商务部、工业和安全局和来自其他国家/地区的适当授权的 PDF 副本授权该许可应用程序的进口授权，作为必须的."

"You certify that (i) none of the Licensed Applications contains, uses or supports any data encryption or cryptographic functions; or (ii) in the event that any Licensed Application contains, uses or supports any such data encryption or cryptographic functionality, You will, upon request, provide Apple with a PDF copy of Your Encryption Registration Number (ERN), or export classification ruling (CCATS) issued by the United States Commerce Department, Bureau of Industry and Security and PDF copies of appropriate authorizations from other countries that mandate import authorizations for that Licensed Application, as required."

请检查您的应用的加密能力，并在重新提交时你的二进制文件，检查问题的适当答案iTunes Connect 的出口合规部分.你可能会被问到一些确定应用程序中加密级别的后续问题；您可能还会被要求提供您的 CCATS 副本.

Please review your app's encryption ability, and when resubmitting your binary, check the appropriate answers to the questions in the Export Compliance section of iTunes Connect. You may be asked some follow-on questions to determine the level of encryption in your app; you may also be asked to provide a copy of your CCATS.

如果您有与出口合规性和应用使用相关的问题加密，请联系 App Store 出口合规团队:[e-mail].

If you have questions related to export compliance and your app's use of encryption, please contact the App Store Export Compliance team at [e-mail].

1. 我第一次对密码学问题说是"，然后回答其余的问题.
2. 第二，我说可能是因为 RNCRyptor 使用内置 SDK 加密，我必须重播否"，但该应用程序再次被拒绝.

我认为现在，我必须根据 这篇 文章.但接受(或不接受)我的请求可能需要一个月或更长时间.

I think that for now, i have to register my application for encryption a "CCATS" or a "SNAP-R" according to this article. but it can take a month or more to accept(or not) my request.

我的问题是:

1. 使用 CCCryptor(和 RNCryptor)，我需要向 Apple 提供一份加密证书的副本，还是我缺少其他东西?
2. 如果是，我该如何加快流程(我不在美国)?
3. 最后，苹果问:你是在法国发布你的产品吗?，他们的意思是我的公司是法语的还是那个应用程序将在法国商店销售?
4. 我如何获得法语认证?我们有美国认证之类的在线表格，还是我们必须去法语管理部门才能获得?

1. using CCCryptor(with RNCryptor), have i to deliver a copy of the encryption certificate To Apple, or i'm i missing sothing else?
2. If YES, how can i accelerate the process (i'm not in the USA)?
3. In the end, Apple ask : are you releasing your product in France?, they mean that my Company is in French or that application will be sell in the French stor ?
4. How can i get the certification for French? have we an online form like USA certification or we have to go to the administration in French to have one ?

推荐答案

您必须执行 CCATS/SNAP-R 程序.问题是 Apple 的服务器在美国，而您将应用程序运回欧洲.是的，在我们的案例中，我们花了大约 3 周的时间完成所有工作.

You will have to do the CCATS/SNAP-R procedure. The problem is that the servers of Apple are in the states and you ship your application back to Europe. And yes in our case it took about 3 weeks to get all done.

现在回答您的问题:

使用 CCCryptor(与 RNCryptor)，让我提供一份给 Apple 的加密证书，还是我缺少其他东西?

using CCCryptor(with RNCryptor), have i to deliver a copy of the encryption certificate To Apple, or i'm i missing sothing else?

不，您不需要向苹果提供任何证书或代码.

No you don't need to deliver any certificates or code to apple.

如果是，我怎样才能加快这个过程(我不在美国)?

If the YES, how can i accelerate the process (i'm not in the USA)?

今天开始这个过程……这是唯一有帮助的事情.

Start the process today... it's the only thing that helps.

最后，Apple 会问:你会在法国发布你的产品吗?，他们的意思是我的公司是法语或者申请将是在法国商店出售?

In the end, Apple ask : are you releasing your product in France?, they mean that my Company is in French or that application will be sell in the French stor ?

Apple 正在询问您将在哪些商店销售，仅限法国、欧洲和全球

Apple is asking in what stores will you sell, only France, Europe , worldwide

我如何获得法语认证?我们有在线表格吗像美国认证或者我们必须去管理法语有一个吗?

How can i get the certification for French? have we an online form like USA certification or we have to go to the administration in French to have one ?

我认为不需要翻译，您只需填写在线表格并填写长长的问题列表即可.

I don't think the have a translation, you will just have to do the online forms and fill the long question list.

祝你好运

这篇关于AES-256 加密 &Apple iTunes 出口限制的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！