X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 5A9943857C79
Authentication-Results:	sourceware.org; dmarc=none (p=none dis=none)
	header.from=SystematicSw.ab.ca
Authentication-Results:	sourceware.org;
	spf=none smtp.mailfrom=brian DOT inglis AT systematicsw DOT ab DOT ca
X-Authority-Analysis:	v=2.4 cv=P9aEOgMu c=1 sm=1 tr=0 ts=5f9a1f78
	a=kiZT5GMN3KAWqtYcXc+/4Q==:117 a=kiZT5GMN3KAWqtYcXc+/4Q==:17
	a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=mDV3o1hIAAAA:8 a=ejknC5xS72zp2OFXFO8A:9
	a=j5FbO3h9j3idVNTA:21 a=CO4RjPjuyE6RaIZm:21 a=QEXdDO2ut3YA:10
	a=buB1NfXUTBUA:10 a=IfQ-iFkkCvMA:10 a=yipANtDfiQYA:10 a=uGFVJu2y250A:10
	a=sRI3_1zDfAgwuvI8zelB:22 a=_FVE-zBwftR9WsbkzFJk:22
Subject:	Re: INQUIRY: Export Classification Controls
To:	Cygwin <cygwin AT cygwin DOT com>
References:	<BL0PR85MB02574D5328B62721BDEC1ECFD9170 AT BL0PR85MB0257 DOT NAMPRD85 DOT PROD DOT OUTLOOK DOT COM>
From:	Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Autocrypt:	addr=Brian DOT Inglis AT SystematicSw DOT ab DOT ca; prefer-encrypt=mutual;
	keydata=
	mDMEXopx8xYJKwYBBAHaRw8BAQdAnCK0qv/xwUCCZQoA9BHRYpstERrspfT0NkUWQVuoePa0
	LkJyaWFuIEluZ2xpcyA8QnJpYW4uSW5nbGlzQFN5c3RlbWF0aWNTdy5hYi5jYT6IlgQTFggA
	PhYhBMM5/lbU970GBS2bZB62lxu92I8YBQJeinHzAhsDBQkJZgGABQsJCAcCBhUKCQgLAgQW
	AgMBAh4BAheAAAoJEB62lxu92I8Y0ioBAI8xrggNxziAVmr+Xm6nnyjoujMqWcq3oEhlYGAO
	WacZAQDFtdDx2koSVSoOmfaOyRTbIWSf9/Cjai29060fsmdsDLg4BF6KcfMSCisGAQQBl1UB
	BQEBB0Awv8kHI2PaEgViDqzbnoe8B9KMHoBZLS92HdC7ZPh8HQMBCAeIfgQYFggAJhYhBMM5
	/lbU970GBS2bZB62lxu92I8YBQJeinHzAhsMBQkJZgGAAAoJEB62lxu92I8YZwUBAJw/74rF
	IyaSsGI7ewCdCy88Lce/kdwX7zGwid+f8NZ3AQC/ezTFFi5obXnyMxZJN464nPXiggtT9gN5
	RSyTY8X+AQ==
Organization:	Systematic Software
Message-ID:	<7565fc68-aaa7-b686-5ab5-c0ebfc5407b3@SystematicSw.ab.ca>
Date:	Wed, 28 Oct 2020 19:48:38 -0600
User-Agent:	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101
	Thunderbird/68.12.1
MIME-Version:	1.0
In-Reply-To:	<BL0PR85MB02574D5328B62721BDEC1ECFD9170@BL0PR85MB0257.NAMPRD85.PROD.OUTLOOK.COM>
X-CMAE-Envelope:	MS4xfOSNjAG1DN4gmslnDu+QD+3rpSJNh943QXg8WCyFx7y4pAUDJN8hi7UMqXR1Sh9ziG/k4jdVShrwe6Lg/+kcqofjMJgIoN70X1SRhA0f2n/6F55SAv4z
	mH90g96mBUfiory40gnfSZUmPfS9x2mZ3uK8d6b9btBO575YpDTOaPyWpH/J4/Dy5vOb5TyW18BoIM6/WDzWZ0LdLAsfL3FOWk3OQGW/LoN4zflOCWzGmSyi
X-Spam-Status:	No, score=-6.8 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
	KAM_LAZY_DOMAIN_SECURITY, KAM_SHORT, NICE_REPLY_A, RCVD_IN_DNSWL_LOW,
	SPF_HELO_NONE, SPF_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	Cygwin <cygwin AT cygwin DOT com>
Cc:	"Hahn, Michelle" <mhahn AT deloitte DOT com>
Errors-To:	cygwin-bounces AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 09T1n7Jq010098

Hi Michelle,

Cygwin is a global, all-volunteer, open source project, offering free (in many
senses) packages of software from other global, often volunteer, open source
projects, which will run together and allow users to "Get that /Linux/ feeling -
on Windows".

The only answers you will likely get, will have to be from reading the
information on this web site and others, or by engaging open source software
consultants and consulting IP lawyers to do so, and answer your questions.
There may be some such folks working at Deloitte.

Anything any one says about the project are only our/their personal opinions,
and may bear no relation to the actuality, reality, or the truth.

Pointers below:
> Problem reports:      https://cygwin.com/problems.html
> FAQ:                  https://cygwin.com/faq/
> Documentation:        https://cygwin.com/docs.html
> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

	https://cygwin.com/licensing.html

"Does Cygwinâ„¢ have an ECCN number?
No. Cygwin source and binary are made publicly available and free of charge to
download so Cygwin is provided under TSU/TSPA exemption. As a result, Cygwin
does not require an ECCN number."

Please note that the licensing terms require you to bundle, or make available
online, the exact copies of any Cygwin packages source code, that you distribute
in a binary form elsewhere. From the same web page:

"What are the licensing terms?
Most of the tools are covered by the GNU GPL, some are public domain, and others
have a X11 style license. To cover the GNU GPL requirements, the basic rule is
if you give out any binaries, you must also make the source available. For the
full details, be sure to read the text of the GNU General Public License (GPL).

	https://cygwin.com/COPYING

The Cygwinâ„¢ API library found in the winsup subdirectory of the source code is
covered by the GNU Lesser General Public License (LGPL) version 3 or later. For
details of the requirements of LGPLv3, please read the GNU Lesser General Public
License (LGPL).

	https://cygwin.com/COPYING.LIB

For more information on the GPL see the GPL FAQ.

	https://gnu.org/licenses/gpl-faq.html"

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]


On 2020-10-28 16:16, Hahn, Michelle via Cygwin wrote:
> Dear Cygwin,
> 
> My name is Michelle Hahn and I am a Tax Consultant I in the export controls practice at Deloitte. We are conducting an internal risk assessment of our client's third party software, which includes Cygwin. We would like to know if you have assigned an export control classification to Cygwin. If so, can you please share the ECCN with us. Export control classification numbers (sometimes called ECCNs) are specific alpha numeric codes that indicate whether the product or software needs an authorization to be exported. Some examples of export classification numbers for software could be 5A002, 5D002, or 5A992. If not, can you please answer the following questions related to the application and its capabilities:
> 
> 1
> What is the commercial purpose of the application?
> 2
> Is one of the primary functions of the application communications/networking e.g. chatting or instant messaging using text, images and video?
> 3
> Has the software been designed for use with any machinery? i.e. Operation of a device such as exploration equipment? If yes, please provide details
> 4
> How can the software be purchased e.g. through a website or as part of a service provision?
> 5
> Which devices is the software typically downloaded to? i.e. phone, tablet, asset shared computer?
> 6
> Does the software (including any of the sub applications) contain, use or call encryption (information security) functionality?
> 
> Please in your answer provide details of the sub applications with such functionality.
> 7
> How does the software utilize cryptography? (commercially, what is it used for - i.e.. sending and receiving information, etc.)
> 8
> Is the encryption functionality of the software limited to performing any of the following:
> 1.a "Authentication"
> 1.b "Digital Signature"
> 1.c "Data integrity"
> 1.d "Non-repudiation"
> 1.e Digital rights management including the execution of copy-protected software 1.f Encryption or decryption in support of entertainment, mass commercial broadcasts or medical records management; or,
> 1.g Key management in support of any function described above
> 9
> Can users access or change cryptographic functionality in the software?
> 10
> Is the software designed or modified to perform cryptanalytic functions?
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -