ECCN reference · Category 5: Telecommunications and information security
ECCN 5A004
"Systems," "equipment" and "components" for defeating, weakening or bypassing "information security," as follows
Systems, equipment and components. Reasons for control: NS (National security), RS (Regional stability), AT (Anti-terrorism), EI (Encryption items).
Does 5A004 need a license to your country?
Enter the full classification (for example 5A004.a) and a destination. The check reads the Country Chart, the end-use and embargo rules, and shows the rule and source behind the answer.
License requirements
Each control below comes from the entry’s License Requirements table. Where it names a Country Chart column, the countries with an X in that column need a license for the items the control covers, unless a License Exception applies.
- NS (National security): NS applies to entire entry.
Country Chart column NS1: a license is needed to 193 countries with an X
Afghanistan, Albania, Algeria, Andorra, Angola, Antigua and Barbuda, Argentina, Armenia, Aruba, Austria, Azerbaijan, Bahamas, The, Bahrain, Bangladesh, Barbados, Belarus, Belgium, Belize, Benin, Bhutan, Bolivia, Bosnia and Herzegovina, Botswana, Brazil, Brunei, Bulgaria, Burkina Faso, Burma, Burundi, Cambodia, Cameroon, Cape Verde, Central African Republic, Chad, Chile, China, Colombia, Comoros, Congo (Democratic Republic of the), Congo (Republic of the), Costa Rica, Cote d'Ivoire, Croatia, Curaçao, Cyprus, Czech Republic, Denmark, Djibouti, Dominica, Dominican Republic, Ecuador, Egypt, El Salvador, Equatorial Guinea, Eritrea, Estonia, Eswatini, Ethiopia, Fiji, Finland, France, Gabon, Gambia, The, Georgia, Germany, Ghana, Greece, Grenada, Guatemala, Guinea, Guinea-Bissau, Guyana, Haiti, Honduras, Hungary, Iceland, India, Indonesia, Iraq, Ireland, Israel, Italy, Jamaica, Japan, Jordan, Kazakhstan, Kenya, Kiribati, Korea, South, Kosovo, Kuwait, Kyrgyzstan, Laos, Latvia, Lebanon, Lesotho, Liberia, Libya, Liechtenstein, Lithuania, Luxembourg, Macau, Madagascar, Malawi, Malaysia, Maldives, Mali, Malta, Marshall Islands, Mauritania, Mauritius, Mexico, Micronesia (Federated State of), Moldova, Monaco, Mongolia, Montenegro, Morocco, Mozambique, Namibia, Nauru, Nepal, Netherlands, New Zealand, Nicaragua, Niger, Nigeria, North Macedonia, Norway, Oman, Pakistan, Palau, Panama, Papua New Guinea, Paraguay, Peru, Philippines, Poland, Portugal, Qatar, Romania, Russia, Rwanda, Samoa, San Marino, Sao Tome and Principe, Saudi Arabia, Senegal, Serbia, Seychelles, Sierra Leone, Singapore, Sint Maarten (the Dutch two-fifths of the island of Saint Martin), Slovakia, Slovenia, Solomon Islands, Somalia, South Africa, South Sudan, Republic of, Spain, Sri Lanka, St. Kitts and Nevis, St. Lucia, St. Vincent and the Grenadines, Sudan, Suriname, Sweden, Switzerland, Taiwan, Tajikistan, Tanzania, Thailand, Timor-Leste, Togo, Tonga, Trinidad and Tobago, Tunisia, Turkmenistan, Tuvalu, Türkiye, Uganda, Ukraine, United Arab Emirates, Uruguay, Uzbekistan, Vanuatu, Vatican City, Venezuela, Vietnam, Western Sahara, Yemen, Zambia, Zimbabwe.
- RS (Regional stability): RS applies to items controlled by 5A004.z.1.a, z.2.a. To or within any destination worldwide. See § 742.6(a)(6)(iii)(A) of the EAR.
- RS (Regional stability): RS applies to items controlled by 5A004.z.1.b, z.2.b. To or within the United Arab Emirates or destinations specified in Country Groups D:1, D:4, and D:5 of supplement no. 1 to part 740 of the EAR, excluding any destination also specified in Country Groups A:5 or A:6. See § 742.6(a)(6)(iii)(B) of the EAR.
- AT (Anti-terrorism): AT applies to entire entry. No Country Chart country has an X in column AT1; the destinations this control targets are under “Not decided by the Country Chart” below.
- EI (Encryption items): EI applies to entire entry. Refer to § 742.15 of the EAR.
Not decided by the Country Chart: Covered Donetsk region of Ukraine (DNR), Covered Luhansk region of Ukraine (LNR), Crimea region of Ukraine, Cuba, Iran, Korea, North, Syria. These destinations are under embargoes or other special controls in 15 CFR Part 746, which require a license for most items whatever the chart shows. Russia and Belarus also have broad Part 746 controls in addition to the chart.
A blank on the Country Chart is not permission to ship. End-use and end-user rules (15 CFR Part 744), embargoes and sanctions (Part 746), and the parties to the transaction still apply. Use the check above for your item and country.
List-based License Exceptions
As the entry lists them. Each exception has its own conditions in 15 CFR Part 740, and § 740.2 bars or limits most of them for Russia, Belarus, Country Group D:5 and embargoed destinations, so an entry’s “Yes” does not mean it is available everywhere.
- LVS: Yes: $500 for "components"; N/A for 5A004.z. N/A for systems and equipment.
- GBS: N/A
- ENC: Yes for certain EI controlled commodities. See § 740.17 of the EAR for eligibility.
- NAC/ACA: Yes, for 5A004.z.1.b, z.2.b
- AIA: Yes for 5A004.z.1.a, z.2.a
- ACM: Yes for 5A004.z
- LPP: Yes for 5A004.z.1.a, z.2.a
- Note:
- See § 740.2(a)(9)(ii) of the EAR for license exception restrictions for ECCN 5A004.z.
Items in 5A004
The controls often apply to some paragraphs only, so check the full paragraph, for example 5A004.a.
Show all 9 paragraphs
- 5A004.a Designed or modified to perform 'cryptanalytic functions.'
- 5A004.b Items, not specified by ECCNs 4A005 or 5A004.a, designed to perform all of the following:
- 5A004.b.1 'Extract raw data' from a computing or communications device; and
- 5A004.b.2 Circumvent "authentication" or authorization controls of the device, in order to perform the function described in 5A004.b.1.
- 5A004.z Other commodities, as follows:
- 5A004.z.1.a Commodities that are described in 5A004.a and that also meet or exceed the performance parameters in 3A090.a or 4A090.a;
- 5A004.z.1.b Commodities that are described in 5A004.a and that also meet or exceed the performance parameters in 3A090.b or 4A090.b;
- 5A004.z.2.a Commodities that are described in 5A004.b and that also meet or exceed the performance parameters in 3A090.a or 4A090.a; or
- 5A004.z.2.b Commodities that are described in 5A004.b and that also meet or exceed the performance parameters in 3A090.b or 4A090.b.
Source
Commerce Control List, 15 CFR Part 774, Supplement No. 1 (official text on eCFR), as of August 21, 2026, 1:45AM EDT. Commerce Country Chart, Supplement No. 1 to Part 738, as of August 21, 2026, 1:45AM EDT.
This page is a preliminary reference, not legal advice, a classification ruling or permission to ship. Confirm the classification against the full official text.