In accordance with the provisions of the Executive decree No. 09-410, supplemented and amended, of 10/12/2009 laying down the security rules applicable to activities involving sensitive equipment, and the interministriel order of October 13, 2024 updating the list of sensitive equipment set out in Appendix I of Executive Decree No. 09-410 of December 10, 2009 :
- The operation of cryptographic means classified in paragpraphs 1 and 2 of subsection 3 of section A by any natural or legal person is subject to their obtaining an operating licence issued by the Regulatory Authority (ARPCE) (see categorization of cryptographic means).
- The acquisition of cryptographic means classified in paragpraphs 1 and 2 of subsection 3 of section A, at national level, is subject to an acquisition authorisation issued by the Regulatory Authority (ARPCE) being obtained.
The list of cryptographic means that are not subject to a prior granting of an authorisation for the operation of sensitive equipment issued by the Regulatory Authority (ARPCE) is available here.
The classification of the cryptographic means may be revised according to the evolution of the functionalities of the means concerned. Thus, any cryptographic means listed as free means that undergoes an update or the addition of new functionalities integrating cryptography mechanisms must be the subject of a new information request to the ARPCE for classification purposes.
A cryptographic means initially classified as free means, not subject to the prior granting of an authorisation for the operation of sensitive equipment issued by the Regulatory Authority (ARPCE), may be reclassified as sensitive equipment following a new examination. The list of the means concerned, which have been reclassified and removed from the list of non-sensitive means, can be consulted here.
