AES-256加密苹果iTunes出口限制 [英] AES-256 encryption & Apple iTunes export restrictions

问题描述

我有一个非常大的问题。

我为IOS开发了3个应用程序2，对于mac osx，1开发了使用 RNCryptor （女巫是一个 CCCryptor （AES加密）包装）。
申请被拒绝了两次，他们在分析中心（两次）将它们发送给我：

- PLA 2.3 -----

我们发现您的应用程序说明说它加密
数据。

但是，您的应用没有出口合规性，而不是
符合iOS开发者计划许可协议，根据App Store Review指南要求
。

iOS开发者计划许可协议第2.3节规定，

您证明（i）许可应用程序中没有一个包含，使用
或支持任何数据加密或加密功能;或（ii）在
中，任何许可应用程序包含，使用或支持任何
这样的数据加密或加密功能的事件，您将在
请求，向Apple提供加密注册的PDF副本
号码（ERN）或导出分类美国商业部，工业和安全局
颁发的阳光裁决（CCATS）和
来自其他国家的适当授权的PDF副本，
授权该许可应用程序的进口许可，为
需要。

请检查您的应用程序的加密功能，重新提交
您的二进制文件时，请查看$ b $中的问题的相应答案b连接的导出合规性部分。您可能会被问到一些
的后续问题，以确定应用程序中的加密级别;
您还可能被要求提供您的CCATS副本。

如果您有与出口合规性有关的问题，而您的应用程序使用
的加密请联系App Store出口合规团队
[e-mail]。

1. 我第一次对加密问题说是，并按照其余的问题。


2. 第二，我说也许是因为RNCRyptor使用SDK加密的构建，我必须重播否，否则应用程式再次遭到拒绝。

我认为现在，我必须注册我的加密应用程序CCATS 或SNAP-R，根据这个

我的问题是：

1. 使用 CCCryptor （使用RNCryptor），是否要将加密证书的副本发送给Apple，或者我是否缺少其他内容？


2. 如果是，我如何加速进程（我不在美国）？


3. 最后，苹果问：您是否在法国发行您的产品？，这意味着我的公司是法国还是该法国产品的销售？


4. 我如何获得法语认证？我们是否有像美国认证的在线表格，或者我们必须用法语去管理一个？

解决方案

您必须执行CCATS / SNAP-R程序。问题是苹果的服务器处于这些状态，并将您的应用程序运送回欧洲。
在我们的案例中，是的，大概需要3周才能完成。

现在就您的问题：

使用CCCryptor（与RNCryptor），我要交付一个
加密证书的副本给苹果，还是我还缺少其他的？

不，您不需要向苹果提供任何证书或代码。

如果是，我如何加速进程（我不在美国）？

启动进程今天...这是唯一有用的东西。

最后，苹果问：你在法国发行你的产品吗？ b $ b他们的意思是说我的公司是法国人，还是在法国的销售店里都会有
的销售？

正在询问您将在哪些商店销售，只有法国，欧洲，全世界

我如何获得法语认证？我们有一个在线表格
像美国认证，还是我们必须以
法语来管理一个？

我不认为有翻译，你只需要做在线表格填写长的问题列表。

祝你好运，

I have a really big problem.

I developed 3 applications 2 for IOS and 1 for mac osx to encrypt files using RNCryptor (witch is a CCCryptor (AES encryption) wrappers). The applications was rejected twice, and they send this to me in the resolution center(twice):

----- PLA 2.3 -----

We found that your Application Description states that it encrypts data.

However, your app does not have Export Compliance, which does not comply with the iOS Developer Program License Agreement, as required by the App Store Review Guidelines.

Section 2.3 of the iOS Developer Program License Agreement specifies,

"You certify that (i) none of the Licensed Applications contains, uses or supports any data encryption or cryptographic functions; or (ii) in the event that any Licensed Application contains, uses or supports any such data encryption or cryptographic functionality, You will, upon request, provide Apple with a PDF copy of Your Encryption Registration Number (ERN), or export classification ruling (CCATS) issued by the United States Commerce Department, Bureau of Industry and Security and PDF copies of appropriate authorizations from other countries that mandate import authorizations for that Licensed Application, as required."

Please review your app's encryption ability, and when resubmitting your binary, check the appropriate answers to the questions in the Export Compliance section of iTunes Connect. You may be asked some follow-on questions to determine the level of encryption in your app; you may also be asked to provide a copy of your CCATS.

If you have questions related to export compliance and your app's use of encryption, please contact the App Store Export Compliance team at [e-mail].

1. the first time i say "YES" for the cryptography question and follow the rest of questions.
2. second, i say maybe because RNCRyptor using the build in SDK encryption i have to replay "NO", but the app was rejected again.

I think that for now, i have to register my application for encryption a "CCATS" or a "SNAP-R" according to this article. but it can take a month or more to accept(or not) my request.

My questions are:

1. using CCCryptor(with RNCryptor), have i to deliver a copy of the encryption certificate To Apple, or i'm i missing sothing else?
2. If YES, how can i accelerate the process (i'm not in the USA)?
3. In the end, Apple ask : are you releasing your product in France?, they mean that my Company is in French or that application will be sell in the French stor ?
4. How can i get the certification for French? have we an online form like USA certification or we have to go to the administration in French to have one ?

解决方案

You will have to do the CCATS/SNAP-R procedure. The problem is that the servers of Apple are in the states and you ship your application back to Europe. And yes in our case it took about 3 weeks to get all done.

Now for your Questions:

using CCCryptor(with RNCryptor), have i to deliver a copy of the encryption certificate To Apple, or i'm i missing sothing else?

No you don't need to deliver any certificates or code to apple.

If the YES, how can i accelerate the process (i'm not in the USA)?

Start the process today... it's the only thing that helps.

In the end, Apple ask : are you releasing your product in France?, they mean that my Company is in French or that application will be sell in the French stor ?

Apple is asking in what stores will you sell, only France, Europe , worldwide

How can i get the certification for French? have we an online form like USA certification or we have to go to the administration in French to have one ?

I don't think the have a translation, you will just have to do the online forms and fill the long question list.

Good Luck,

这篇关于AES-256加密苹果iTunes出口限制的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！