Cryptographic and telecommunications embargo technology

Cryptographic and telecommunications embargo technology covers controls applied to secure communications equipment, encryption hardware, software and related technical information. CoCom, the United States Export Administration Regulations, the European Union dual-use regime and the Wassenaar Arrangement operated in different legal periods and jurisdictions. Their treatment cannot be reduced to one continuous embargo.

Function

CoCom coordinated member controls on strategic exports to the Soviet bloc, including specified telecommunications equipment. Modern cryptographic controls distinguish hardware, software, technology, key-management functions, information-security uses and mass-market products. A control-list entry establishes classification criteria and possible licensing requirements. It does not prove that every product using encryption is prohibited or that source code, a device and a managed service receive identical treatment.

Strategic significance

Current United States treatment is administered principally through the Export Administration Regulations, including classification, licence exceptions and mass-market provisions described by the Bureau of Industry and Security. The Wassenaar Arrangement maintains multilateral control-list language, while the European Union applies Regulation 2021/821. Each regime distinguishes categories and exceptions in its own text. Software can be copied and developed outside the original supplier's jurisdiction, which can reduce the durability of denial, but hardware implementation, secure key custody, specialised components and telecommunications infrastructure remain physical control points.

Control and weaponisation history

The historical comparison matters for AI model weights and frontier models because both can include readily copied software or data. It does not establish that their diffusion paths, security properties or legal treatment are identical. Telecommunications controls also continue to address physical equipment and supply relationships, including the high-risk vendor measures treated at 5G telecommunications infrastructure and high-risk vendor controls. The practical question is which layer is controlled, by which authority, under which list entry or exception, and whether substitutes exist at the required performance and scale.

See also

Encryption technology, export controls and lawful-access policy · CoCom · Wassenaar Arrangement · AI model weights and frontier models · 5G telecommunications infrastructure and high-risk vendor controls · Export control as strategic instrument · Technology denial · Economic statecraft

Sources

• BIS encryption controls.
• Wassenaar control lists.
• EU Regulation 2021/821.
• US Office of the Historian, 1972 CoCom study.