Hi,
We are creating a third-party browser app for iOS, based on Chromium for iOS code. As we know, in order to distribute the iOS app via app store/test flight, App needs to follow export compliance review checklist/questions set by Apple, which basically refer if the app uses, accesses, contains, implements, or incorporates encryption, this is considered an export of encryption software, and is therefore subject to U.S. export and other country or region import compliance requirements.
Use of encryption includes, but is not limited to:
- Making calls over secure channels (i.e. HTTPS, SSL, and so on).
- Using standard encryption algorithms.
- Using crypto functionality from other sources such as iOS or macOS.
- Using proprietary or non-standard encryption algorithms. The U.S. Government defines "non-standard cryptography" as any implementation of "cryptography" involving the incorporation or use of proprietary or unpublished cryptographic functionality, including encryption algorithms or protocols that have not been adopted or approved by a duly recognized international standards body ( e.g., IEEE, IETF, ISO, ITU, ETSI, 3GPP, TIA, and GSMA) and have not otherwise been published.
I know the chromium app for iOS is using #1, but not sure about the rest of the points. So can u help us to come to know that if the Chromium Source code base is using any points from #2 to #4 in any form, if Yes what is the purpose and place of using it.
Regards,
Anand Agarwal