data/eccn/eccnmatrix.xml

<?xml version="1.0" encoding="UTF-8"?>
<eccnmatrix>

 <Project href="http://accumulo.apache.org/">
  <Name>Apache Accumulo Project</Name>
  <Contact><Name>John Vines</Name></Contact>
  <Product>
    <Name>Apache Accumulo Project</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/accumulo.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-137.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.6.0 and on</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/accumulo.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-137.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.5.x</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/accumulo.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://activemq.apache.org/">
  <Name>Apache ActiveMQ Project</Name>
  <Contact><Name>Hiram Chirino</Name></Contact>
  <Product>
    <Name>Apache ActiveMQ</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/activemq/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>4.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/activemq/apache-activemq">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Camel</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/activemq/camel">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/activemq/apache-camel">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://ant.apache.org/">
  <Name>Apache Ant Project</Name>
  <Contact><Name>Conor MacNeill</Name></Contact>
  <Product>
    <Name>Apache Ant</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/ant/core/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/ant/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Ivy</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/ant/ivy/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.0.0-alpha-*-incubating</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://people.apache.org/dist/incubator/ivy/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.0.0-alpha-*-incubating-bin-with-deps</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://people.apache.org/dist/incubator/ivy/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.jcraft.com/jsch/">
        <Manufacturer>JCraft, Inc.</Manufacturer>
        <Why>provides encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.0.0-beta1-* and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/ant/ivy/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.0.0-beta1-bin-with-deps and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/ant/ivy/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.jcraft.com/jsch/">
        <Manufacturer>JCraft, Inc.</Manufacturer>
        <Why>provides encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

  <Project href="https://aries.apache.org/">
    <Name>Apache Aries</Name>
    <Contact><Name>Christian Schneider</Name></Contact>
    <Product>
      <Name>Apache Aries RSA</Name>
      <Version>
        <Names>development and all releases</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://git-wip-us.apache.org/repos/asf/aries-rsa.git">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with the Java SE Security, Jetty (uses SSL)</Why>
        </ControlledSource>
        <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
          <Manufacturer>Oracle</Manufacturer>
          <Why>Java SE Security including Java Cryptography Architecture (JCA),
            Java Cryptography Extension library (JCE),
            Java Security Architecture,
            Java Authentication and Authorization Service (JAAS),
            Java Secure Sockets Extension (JSSE),
            Java GSS-API, and Java SASL API
          </Why>
        </ControlledSource>
        <ControlledSource href="http://eclipse.org/jetty">
          <Manufacturer>The Eclipse Foundation</Manufacturer>
          <Why>HTTPS support in Jetty (uses SSL)</Why>
        </ControlledSource>
      </Version>
    </Product>
  </Project>

 <Project href="http://cassandra.apache.org/">
  <Name>Apache Cassandra Project</Name>
  <Contact><Name>Nate McCall</Name></Contact>
  <Product>
    <Name>Apache Cassandra</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/cassandra.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.8 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/cassandra.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>
 <Project href="http://cayenne.apache.org/">
  <Name>Apache Cayenne Project</Name>
  <Contact><Name>Andrus Adamchik</Name></Contact>
  <Product>
    <Name>Apache Cayenne</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/cayenne/main/trunk/cayenne-crypto/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>3.2.M2 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/cayenne/main/trunk/cayenne-crypto/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>
 <Project href="http://commons.apache.org/sandbox/openpgp/">
  <Name>Apache Commons Project</Name>
  <Contact><Name>Torsten Curdt</Name></Contact>
  <Product>
    <Name>Apache Commons Compress</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/commons/proper/compress/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.6 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/commons/compress">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Commons Crypto</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/commons-crypto.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>general-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://www.apache.org/dist/commons/crypto/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>general-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Commons OpenPGP</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/commons/sandbox/openpgp/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://couchdb.apache.org/">
  <Name>Apache CouchDB Project</Name>
  <Contact><Name>Damien Katz</Name></Contact>
  <Product id="couchdb" href="http://couchdb.apache.org/">
    <Name>Apache CouchDB</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/couchdb/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes a HTTP client with SSL functionality</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.9.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/couchdb/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes a HTTP client with SSL functionality</Why>
      </ControlledSource>
      <ControlledSource href="http://github.com/cmullaparthi/ibrowse/tree/master">
        <Manufacturer>ibrowse</Manufacturer>
        <Why>HTTP client with SSL functionality</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://cxf.apache.org/">
  <Name>Apache CXF Project</Name>
  <Contact><Name>Dan Kulp</Name></Contact>
  <Product>
    <Name>Apache CXF</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/cxf/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache XML Security Java API, WSS4J and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="ftp://ftp.bouncycastle.org/pub/release1.36/bcprov-jdk14-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library API for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all 2.*</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://people.apache.org/dist/cxf/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache XML Security Java API, WSS4J and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="ftp://ftp.bouncycastle.org/pub/release1.36/bcprov-jdk14-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library API for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all 2.*-incubating</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://people.apache.org/dist/incubator/cxf/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache XML Security Java API, WSS4J and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="ftp://ftp.bouncycastle.org/pub/release1.36/bcprov-jdk14-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library API for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://db.apache.org/derby/">
  <Name>Apache DB Project</Name>
  <Contact><Name>Jean T. Anderson</Name></Contact>
  <Product>
    <Name>Apache Derby</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/db/derby/code/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>derby-10.*</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/db/derby/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache DdlUtils</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/db/ddlutils/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes Apache Ant, which includes SSL functionality</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>ddlutils-1.0 and higher</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/db/ddlutils/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes Apache Ant, which includes SSL functionality</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache ObjectRelationalBridge - OJB</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/db/ojb/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes Apache Ant, which includes SSL functionality</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>ojb-1.0.0 and higher</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/db/ojb/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes Apache Ant, which includes SSL functionality</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Torque</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/db/torque/">
        <Manufacturer>ASF</Manufacturer>
        <Why>The Torque Generator includes Apache Ant, which includes SSL functionality</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>torque-3.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/db/torque/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes Apache Ant, which includes SSL functionality</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://directory.apache.org/">
  <Name>Apache Directory Project</Name>
  <Contact><Name>Emmanuel Lecharny</Name></Contact>
  <Product>
    <Name>Apache Directory Server</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/directory/apacheds">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/directory/apacheds">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.5 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/directory/apacheds">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk15-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Directory Studio</Name>
    <Version>
      <Names>1.2 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/directory/studio">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk15-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://drill.apache.org/">
  <Name>Apache Drill</Name>
  <Contact><Name>Parth Chandra</Name></Contact>
  <Product>
    <Name>Apache Drill</Name>
    <Version>
      <Names>1.2 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/drill.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Java SE Security, SASL, Kerberos, and OpenSSL</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>Java SE Security including Java Cryptography Architecture (JCA),
            Java Cryptography Extension library (JCE),
            Java Security Architecture,
            Java Authentication and Authorization Service (JAAS),
            Java Secure Sockets Extension (JSSE),
            Java GSS-API, and Java SASL API
        </Why>
      </ControlledSource>
      <ControlledSource href="http://eclipse.org/jetty">
        <Manufacturer>The Eclipse Foundation</Manufacturer>
        <Why>HTTPS support in Jetty (uses SSL)</Why>
      </ControlledSource>
      <ControlledSource href="https://www.cyrusimap.org/sasl/">
        <Manufacturer>The Cyrus SASL project</Manufacturer>
        <Why>General purpose SASL library</Why>
      </ControlledSource>
      <ControlledSource href="http://web.mit.edu/kerberos/">
        <Manufacturer>MIT</Manufacturer>
        <Why>General purpose Kerberos library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

  <Project href="https://felix.apache.org/">
    <Name>Apache Felix</Name>
    <Contact><Name>Karl Pauls</Name></Contact>
    <Product>
      <Name>Apache Felix Http Jetty</Name>
      <Version>
        <Names>development</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://git-wip-us.apache.org/repos/asf/felix-dev.git">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with the Java SE Security, Jetty (uses SSL)</Why>
        </ControlledSource>
        <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
          <Manufacturer>Oracle</Manufacturer>
          <Why>Java SE Security including Java Cryptography Architecture (JCA),
            Java Cryptography Extension library (JCE),
            Java Security Architecture,
            Java Authentication and Authorization Service (JAAS),
            Java Secure Sockets Extension (JSSE),
            Java GSS-API, and Java SASL API
          </Why>
        </ControlledSource>
        <ControlledSource href="http://eclipse.org/jetty">
          <Manufacturer>The Eclipse Foundation</Manufacturer>
          <Why>HTTPS support in Jetty (uses SSL)</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>all releases</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://archive.apache.org/dist/felix/">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with the Java SE Security, Jetty (uses SSL)</Why>
        </ControlledSource>
        <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
          <Manufacturer>Oracle</Manufacturer>
          <Why>Java SE Security including Java Cryptography Architecture (JCA),
            Java Cryptography Extension library (JCE),
            Java Security Architecture,
            Java Authentication and Authorization Service (JAAS),
            Java Secure Sockets Extension (JSSE),
            Java GSS-API, and Java SASL API
          </Why>
        </ControlledSource>
        <ControlledSource href="http://eclipse.org/jetty">
          <Manufacturer>The Eclipse Foundation</Manufacturer>
          <Why>HTTPS support in Jetty (uses SSL)</Why>
        </ControlledSource>
      </Version>
    </Product>
  </Project>

 <Project href="http://forrest.apache.org/">
  <Name>Apache Forrest Project</Name>
  <Contact><Name>David Crossley</Name></Contact>
  <Product id="forrest" href="http://forrest.apache.org/">
    <Name>Apache Forrest</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/forrest/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>apache-forrest-0.6 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/forrest/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption (SSH) library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.jcraft.com/jsch/">
        <Manufacturer>JCraft, Inc.</Manufacturer>
        <Why>provides encryption (SSH) library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://geode.apache.org/">
  <Name>Apache Geode Project</Name>
  <Contact><Name>Mark Bretl</Name></Contact>
  <Product>
    <Name>Apache Geode</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/geode.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/geode-native.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/geode-examples.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all releases</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/geode.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/geode-native.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/geode-examples.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://geronimo.apache.org/">
  <Name>Apache Geronimo Project</Name>
  <Contact><Name>Matt Hogstrom</Name></Contact>
  <Product>
    <Name>Apache Geronimo</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/geronimo/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/geronimo/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://hadoop.apache.org/">
  <Name>Apache Hadoop Project</Name>
  <Contact><Name>Owen O'Malley</Name></Contact>
  <Product>
    <Name>Apache Hadoop</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/hadoop/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>17.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/hadoop/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://harmony.apache.org/">
  <Name>Apache Harmony Project</Name>
  <Contact><Name>Tim Ellison</Name></Contact>
  <Product>
    <Name>Apache Harmony</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/harmony/">
        <Manufacturer>ASF</Manufacturer>
        <Why>implements the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>5.0M1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/harmony/">
        <Manufacturer>ASF</Manufacturer>
        <Why>implements the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-137.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://hawq.incubator.apache.org/">
  <Name>Apache HAWQ (incubating) Project</Name>
  <Contact><Name>Roman Shaposhnik</Name></Contact>
  <Product>
    <Name>Apache HAWQ (incubating) Project</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-hawq.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose encryption and digest code</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="https://hive.apache.org/">
  <Name>Apache Hive Project</Name>
  <Contact><Name>Owen O'Malley</Name></Contact>
  <Product>
    <Name>Apache Hive</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://github.com/apache/hive">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.3.0 and on</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://github.com/apache/hive">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://hc.apache.org/">
  <Name>Apache HttpComponents Project</Name>
  <Contact><Name>Erik Abele</Name></Contact>
  <Product id="hc-core" href="http://hc.apache.org/httpcomponents-core/">
    <Name>Apache HttpComponents Core</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/httpcomponents/httpcore/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>4.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpcomponents/httpcore/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product id="hc-client" href="http://hc.apache.org/httpcomponents-client/">
    <Name>Apache HttpComponents Client</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/httpcomponents/httpclient/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>4.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpcomponents/httpclient/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.x, 2.x, 3.x</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpcomponents/commons-httpclient/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://httpd.apache.org/">
  <Name>Apache HTTP Server Project</Name>
  <Contact><Name>Roy T. Fielding</Name></Contact>
  <Product id="httpd" href="http://httpd.apache.org/">
    <Name>Apache HTTP Server</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/httpd/">
        <Manufacturer>ASF</Manufacturer>
        <Why>mod_ssl designed for use with SSL library, apr-util/mod_session_crypto designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>apache_1.3.x</Names>
      <ECCN>n/a</ECCN>
    </Version>
    <Version>
      <Names>httpd-2.0.x</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpd/">
        <Manufacturer>ASF</Manufacturer>
        <Why>mod_ssl designed for use with SSL library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>httpd-2.2.x</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpd/">
        <Manufacturer>ASF</Manufacturer>
        <Why>mod_ssl module and apr-util/ssl designed for use with SSL library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>apache_2.2.x-win32-*-openssl-*</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpd/">
        <Manufacturer>ASF</Manufacturer>
        <Why>mod_ssl module and apr-util/ssl designed for use with SSL library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>httpd-2.4.x</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpd/">
        <Manufacturer>ASF</Manufacturer>
        <Why>mod_ssl module designed for use with SSL library, apr-util/mod_session_crypto designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product id="flood" href="http://httpd.apache.org/test/flood/">
    <Name>Apache Flood</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/httpd/test/flood/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with SSL library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>flood-0.4</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpd/flood/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with SSL library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product id="libapreq" href="http://httpd.apache.org/apreq/">
    <Name>Apache libapreq</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/httpd/apreq/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache httpd 2.x</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>libapreq2</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpd/libapreq/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache httpd 2.x</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>libapreq</Names>
      <ECCN>n/a</ECCN>
    </Version>
  </Product>
  <Product id="mod_ftp" href="http://httpd.apache.org/mod_ftp/">
    <Name>Apache mod_ftp</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/httpd/mod_ftp/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache httpd 2.x</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product id="mod_python" href="http://www.modpython.org/">
    <Name>Apache mod_python</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/httpd/mod_python/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache httpd 2.x</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>mod_python-*</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/httpd/modpython/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache httpd 2.x</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://incubator.apache.org/">
  <Name>Apache Incubator Project</Name>
  <Contact><Name>Roman Shaposhnik</Name></Contact>
  <Product>
    <Name>Apache Abdera</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/incubator/abdera/java/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache XML Security Java API</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all 0.*-incubating</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://people.apache.org/dist/incubator/abdera/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache XML Security Java API</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-134.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk14-134.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
     <Name>Apache Airavata</Name>
     <Version>
       <Names>development</Names>
       <ECCN>5D002</ECCN>
       <ControlledSource href="http://svn.apache.org/repos/asf/incubator/airavata/">
         <Manufacturer>ASF</Manufacturer>
         <Why>
           Designed for use with the Bouncy Castle, Puretls and Cryptix enryption libraries.
         </Why>
       </ControlledSource>
       <ControlledSource href="http://svn.apache.org/repos/asf/incubator/pdfbox/trunk/external/bcprov-jdk14-132.jar">
         <Manufacturer>Bouncy Castle</Manufacturer>
         <Why>General-purpose encryption library for Java</Why>
       </ControlledSource>
       <ControlledSource href="http://www.cryptix.org/">
         <Manufacturer>The Cryptix project</Manufacturer>
         <Why>Provides cryptography for Java platform</Why>
       </ControlledSource>
       <ControlledSource href="http://www.rtfm.com/puretls/">
         <Manufacturer>Claymore Systems Puretls</Manufacturer>
         <Why>Provides Java implementation of the SSLv3 and TLSv1 protocols</Why>
       </ControlledSource>
       <ControlledSource href="http://www.globus.org/security/overview.html">
         <Manufacturer>Globus Project</Manufacturer>
         <Why>Provides implementation of Grid Security Infrastructure (GSI)</Why>
       </ControlledSource>
     </Version>
  </Product>
<Product>
    <Name>Apache CloudStack</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://jasypt.svn.sourceforge.net/svnroot/jasypt/trunk">
        <Manufacturer>JaSypt.org</Manufacturer>
        <Why>Publicly available encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://code.launchpad.net/~mysql/mysql-server/trunk">
        <Manufacturer>Oracle</Manufacturer>
        <Why>Publicly available database encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java</Why>
      </ControlledSource>
      <ControlledSource href="http://svn.apache.org/repos/asf/webservices/wss4j/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://git.openswan.org/openswan.git">
        <Manufacturer>OpenSwan.org</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.jcraft.com/jsch/">
        <Manufacturer>JCraft, Inc.</Manufacturer>
        <Why>provides encryption (SSH) library</Why>
      </ControlledSource>
      <ControlledSource href="http://git-wip-us.apache.org/repos/asf/incubator-cloudstack.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Makes use of publicly available encryption libraries</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Hop</Name>
    <Version>
      <Names>Development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://github.com/apache/incubator-hop">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all releases</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://archive.apache.org/dist/incubator/hop/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Impala</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-impala.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with OpenSSL.</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.7.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/incubator/impala">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with OpenSSL.</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Milagro</Name>
    <Version>
      <Names>Development - C Library</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-milagro-crypto-c.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>General purpose and Apache Milagro servers.</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>Development - JavaScript Library</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-milagro-crypto-js.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>General purpose and Apache Milagro servers.</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>Development - Rust Library</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-milagro-crypto-rust.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>General purpose and Apache Milagro servers.</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>Libraries and Servers 0.0.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-milagro-dta.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Milagro C, Rust and JavaScript Libraries and Milagro Servers</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache NiFi</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://jasypt.svn.sourceforge.net/svnroot/jasypt/trunk">
        <Manufacturer>JaSypt.org</Manufacturer>
        <Why>Publicly available encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) and secure socket (JSSE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.jcraft.com/jsch/">
        <Manufacturer>JCraft, Inc.</Manufacturer>
        <Why>provides encryption (SSH) library</Why>
      </ControlledSource>
      <ControlledSource href="http://git-wip-us.apache.org/repos/asf/incubator-nifi.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Makes use of publicly available encryption libraries</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.0.1-incubating and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://jasypt.svn.sourceforge.net/svnroot/jasypt/trunk">
        <Manufacturer>JaSypt.org</Manufacturer>
        <Why>Publicly available encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) and secure socket (JSSE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.jcraft.com/jsch/">
        <Manufacturer>JCraft, Inc.</Manufacturer>
        <Why>provides encryption (SSH) library</Why>
      </ControlledSource>
      <ControlledSource href="http://git-wip-us.apache.org/repos/asf/incubator-nifi.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Makes use of publicly available encryption libraries</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache PDFBox</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/incubator/pdfbox/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>
          Designed for use with the Java Cryptography Architecture (JCA)
          and the Bouncy Castle enryption libraries.
        </Why>
      </ControlledSource>
      <ControlledSource href="http://svn.apache.org/repos/asf/incubator/pdfbox/trunk/external/bcprov-jdk14-132.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.4</Why>
      </ControlledSource>
      <ControlledSource href="http://svn.apache.org/repos/asf/incubator/pdfbox/trunk/external/bcmail-jdk14-132.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Pirk</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git1-us-west.apache.org/repos/asf?p=incubator-pirk.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes cryptographic software implementation</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.1.0-incubating and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://dist.apache.org/repos/dist/dev/incubator/pirk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes cryptographic software implementation</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Pulsar</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://github.com/apache/incubator-pulsar">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Bouncy Castle enryption libraries.</Why>
      </ControlledSource>
      <ControlledSource href="ftp://ftp.bouncycastle.org/pub/release1.55/bcprov-jdk15on-155.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.20-incubating and greater</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://github.com/apache/incubator-pulsar">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Bouncy Castle enryption libraries.</Why>
      </ControlledSource>
      <ControlledSource href="ftp://ftp.bouncycastle.org/pub/release1.55/bcprov-jdk15on-155.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Shindig</Name>
   <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/incubator/shindig/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Slider</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-slider.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://eclipse.org/jetty">
        <Manufacturer>The Eclipse Foundation</Manufacturer>
        <Why>SSL library for Jetty</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.30-incubating</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-slider.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.40-incubating and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-slider.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://eclipse.org/jetty">
        <Manufacturer>The Eclipse Foundation</Manufacturer>
        <Why>SSL library for Jetty</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Taverna</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-language.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache HttpComponents</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-osgi.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache HttpComponents</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-engine.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache Derby, Apache Taverna Language and Apache Taverna OSGi</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-common-activities.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Jetty, Apache WSS4J, Apache XML Security for Java, Apache HttpComponents and Apache Taverna Engine</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-commandline.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache WSS4J, Apache XML Security for Java, Apache HttpComponents, BouncyCastle crypto, Apache Taverna Engine and Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-server.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache CXF and Apache Taverna Command Line</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-workbench.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Apache Taverna Engine</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-workbench-common-activities.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache Taverna Workbench and Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-workbench-product.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Builds distribution that includes Apache WSS4J, Apache XML Security for Java, Apache HttpComponents and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-plugin-component.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache HttpComponents, Apache Taverna Engine, Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-plugin-bioinformatics.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache Taverna Engine</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-plugin-gis.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache Taverna Engine, Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-mobile.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Android SDK https support, Dropbox Android SDK and Apache HttpComponent</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-databundle-viewer.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Ruby OpenSSL</Why>
      </ControlledSource>

      <ControlledSource href="http://bouncycastle.org/download/bcprov-jdk15on-154.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://eclipse.org/jetty">
        <Manufacturer>The Eclipse Foundation</Manufacturer>
        <Why>SSL library for Jetty</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.apache.org/dist/santuario/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Implements XML Signature and Encryption specs</Why>
      </ControlledSource>
      <ControlledSource href="http://people.apache.org/dist/cxf/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache XML Security Java API, WSS4J and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/db/derby/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>

      <ControlledSource href="https://www.dropbox.com/developers-v1/core/sdks/android">
        <Manufacturer>Dropbox</Manufacturer>
        <Why>designed for use with Android SDK, adds a SecureSSLSocketFactory</Why>
      </ControlledSource>
      <ControlledSource href="https://android.googlesource.com/">
        <Manufacturer>Google</Manufacturer>
        <Why>includes encryption code adapted from OpenSSL, BouncyCastle, BoringSSL</Why>
      </ControlledSource>
      <ControlledSource href="https://github.com/ruby/openssl">
        <Manufacturer>Ruby Programming Language</Manufacturer>
        <Why>designed for use with OpenSSL</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all releases</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://archive.apache.org/dist/incubator/taverna/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache CXF, Apache WSS4J, Apache XML Security for Java, Apache HttpComponents, Apache Derby, BouncyCastle crypto, Jetty, Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
      <ControlledSource href="http://bouncycastle.org/download/bcprov-jdk15on-154.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://eclipse.org/jetty">
        <Manufacturer>The Eclipse Foundation</Manufacturer>
        <Why>SSL library for Jetty</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.apache.org/dist/santuario/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Implements XML Signature and Encryption specs</Why>
      </ControlledSource>
      <ControlledSource href="http://people.apache.org/dist/cxf/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache XML Security Java API, WSS4J and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/db/derby/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
      <ControlledSource href="https://www.dropbox.com/developers-v1/core/sdks/android">
        <Manufacturer>Dropbox</Manufacturer>
        <Why>designed for use with Android SDK, adds a SecureSSLSocketFactory</Why>
      </ControlledSource>
      <ControlledSource href="https://android.googlesource.com/">
        <Manufacturer>Google</Manufacturer>
        <Why>includes encryption code adapted from OpenSSL, BouncyCastle, BoringSSL</Why>
      </ControlledSource>
      <ControlledSource href="https://github.com/ruby/openssl">
        <Manufacturer>Ruby Programming Language</Manufacturer>
        <Why>designed for use with OpenSSL</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>

  <Product>
    <Name>Apache Trafodion</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-trafodion.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all releases</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://archive.apache.org/dist/incubator/trafodion/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>general-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Tuweni</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-tuweni.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="https://www.bouncycastle.org/download/bcprov-jdk15on-166.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>general-purpose encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://www.bouncycastle.org/download/bcpkix-jdk15on-166.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>all releases</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://archive.apache.org/dist/incubator/tuweni/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="https://www.bouncycastle.org/download/bcprov-jdk15on-166.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>general-purpose encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://www.bouncycastle.org/download/bcpkix-jdk15on-166.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
   <Name>Apache Whirr</Name>
   <Version>
     <Names>development</Names>
     <ECCN>5D002</ECCN>
     <ControlledSource href="http://svn.apache.org/repos/asf/incubator/whirr">
       <Manufacturer>ASF</Manufacturer>
       <Why>designed for use with encryption library</Why>
     </ControlledSource>
   </Version>
   <Version>
     <Names>all 0.*-incubating</Names>
     <ECCN>5D002</ECCN>
     <ControlledSource href="http://archive.apache.org/dist/incubator/whirr/">
       <Manufacturer>ASF</Manufacturer>
       <Why>designed for use with encryption library</Why>
     </ControlledSource>
     <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk14-129.tar.gz">
       <Manufacturer>Bouncy Castle</Manufacturer>
       <Why>general-purpose encryption library</Why>
     </ControlledSource>
     <ControlledSource href="http://www.jcraft.com/jsch/">
       <Manufacturer>JCraft, Inc.</Manufacturer>
       <Why>provides encryption (SSH) library</Why>
     </ControlledSource>
     <ControlledSource href="http://juliusdavies.ca/commons-ssl/">
       <Manufacturer>Not-Yet-Commons-SSL</Manufacturer>
       <Why>general-purpose encryption library</Why>
     </ControlledSource>
   </Version>
  </Product>
 </Project>

 <Project href="http://jakarta.apache.org/jmeter">
  <Name>Apache Jakarta JMeter Project</Name>
  <Contact><Name>Martin van den Bemt</Name></Contact>
  <Product>
    <Name>Apache Jakarta JMeter</Name>
    <Version>
      <Names>1.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/jakarta/jmeter/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>


 <Project href="http://james.apache.org/">
  <Name>Apache JAMES Project</Name>
  <Contact><Name>Norman Maurer</Name></Contact>
  <Product>
    <Name>Apache JAMES Server</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/james/server/">
        <Manufacturer>ASF</Manufacturer>
        <Why>includes bcmail encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk14-129.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>general-purpose encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.3.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/james/server/source/">
        <Manufacturer>ASF</Manufacturer>
        <Why>includes bcmail encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk14-129.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>general-purpose encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache JAMES jDKIM</Name>
    <Version>
      <Names>0.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/james/jdkim/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Use crypto algorithm to sign and verify signatures</Why>
      </ControlledSource>
      <ControlledSource href="http://juliusdavies.ca/commons-ssl/">
        <Manufacturer>Not-Yet-Commons-SSL</Manufacturer>
        <Why>general-purpose encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache JAMES Mailet Crypto</Name>
    <Version>
      <Names>0.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/james/mailet/trunk/crypto/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Use crypto algorithm to sign and verify via SMIME</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk16-146.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>general-purpose encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache JAMES Mime4J</Name>
    <Version>
      <Names>0.4 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/james/mime4j/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Use crypto algorithm to crypt and uncrypt temporary stored data for protection</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://jena.apache.org/">
   <Name>Apache Jena</Name>
   <Contact><Name>Andy Seaborne</Name></Contact>
   <Product>
     <Name>Apache Jena (distribution)</Name>
     <Version>
       <Names>development</Names>
       <ECCN>5D002</ECCN>
       <ControlledSource href="https://repository.apache.org/content/repositories/snapshots/org/apache/jena/">
         <Manufacturer>ASF</Manufacturer>
         <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
       </ControlledSource>
     </Version>
     <Version>
       <Names>binary distribution</Names>
       <ECCN>5D002</ECCN>
       <ControlledSource href="http://archive.apache.org/dist/jena/">
         <Manufacturer>ASF</Manufacturer>
         <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
       </ControlledSource>
       <ControlledSource href="https://repository.apache.org/content/repositories/releases/org/apache/jena/">
         <Manufacturer>ASF</Manufacturer>
         <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
       </ControlledSource>
     </Version>
   </Product>
 </Project>

 <Project href="https://kafka.apache.org/">
  <Name>Apache Kafka Project</Name>
  <Contact><Name>Rajini Sivaram</Name></Contact>
  <Product>
    <Name>Apache Kafka</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf?p=kafka.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built-in Java Secure Socket Extension (JSSE),
             Java Generic Security Services (GSS-API)
             and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose Java Secure Socket Extension (JSSE),
             Generic Security Services (GSS-API)
             and Java Cryptography Extension (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.10.2 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf?p=kafka.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built-in Java Secure Socket Extension (JSSE),
             Java Generic Security Services (GSS-API)
             and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose Java Secure Socket Extension (JSSE),
             Generic Security Services (GSS-API)
             and Java Cryptography Extension (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.9.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf?p=kafka.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built-in Java Secure Socket Extension (JSSE)
             and Java Generic Security Services (GSS-API)</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose Java Secure Socket Extension (JSSE) and
             Java Generic Security Services (GSS-API) included with Java</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://kudu.apache.org">
   <Name>Apache Kudu Project</Name>
   <Contact><Name>Todd Lipcon</Name></Contact>
   <Product>
     <Name>Apache Kudu</Name>
     <Version>
       <Names>development</Names>
       <ECCN>5D002</ECCN>
       <ControlledSource href="https://git-wip-us.apache.org/repos/asf/kudu.git">
         <Manufacturer>ASF</Manufacturer>
         <Why>Designed for use with OpenSSL.
         Designed for use with Java SE Security libraries
         including Java Secure Socket Extension (JSSE),
         Java Generic Security Service (JGSS),
         and Java Authentication and Authorization APIs (JAAS).</Why>
       </ControlledSource>
     </Version>
     <Version>
       <Names>1.1.0 and later</Names>
       <ECCN>5D002</ECCN>
       <ControlledSource href="http://archive.apache.org/dist/kudu/">
         <Manufacturer>ASF</Manufacturer>
         <Why>Designed for use with OpenSSL.
         Designed for use with Java SE Security libraries
         including Java Secure Socket Extension (JSSE),
         Java Generic Security Service (JGSS),
         and Java Authentication and Authorization APIs (JAAS).</Why>
       </ControlledSource>
     </Version>
   </Product>
 </Project>

 <Project href="http://labs.apache.org">
  <Name>Apache Labs Project</Name>
  <Contact><Name>Bernd Fondermann</Name></Contact>
  <Product>
    <Name>Apache BaDCA</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/labs/badca/">
        <Manufacturer>ASF</Manufacturer>
        <Why>BaDCA includes an interface to OpenSSL cryptographic functions
             for use in creating CA's and signing certificates.</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Vysper</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/labs/vysper/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Includes Bounty Castle bcprov encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk15-135.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>general-purpose encryption library</Why>
      </ControlledSource>
    </Version>
   </Product>
 </Project>

 <Project href="http://lucene.apache.org">
  <Name>Apache Lucene Project</Name>
  <Contact><Name>Grant Ingersoll</Name></Contact>
  <Product>
    <Name>Apache Nutch</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/lucene/nutch/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the PDFBox decrypt API in the parse-pdf plugin</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.7 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://www.apache.org/dist/lucene/nutch/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the PDFBox decrypt API in the parse-pdf plugin</Why>
      </ControlledSource>
      <ControlledSource href="http://sourceforge.net/project/showfiles.php?group_id=78314&amp;package_id=79377&amp;release_id=454954">
        <Manufacturer>PDFBox</Manufacturer>
        <Why>PDFBox is a Java PDF Library. This project will allow access to all of the components in a PDF document. More PDF
        manipulation features will be added as the project matures. This ships with a utility to take a PDF document and
        output a text file.
        </Why>
      </ControlledSource>
    </Version>
  </Product>
<Product>
    <Name>Apache Solr</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/lucene/solr/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache Tika API in the contrib/extraction libraries</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.4 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://www.apache.org/dist/lucene/solr/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache Tika API in the contrib/extraction libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://svn.apache.org/repos/asf/lucene/tika/trunk/">
        <Manufacturer>Apache Tika</Manufacturer>
        <Why>Apache Tika is a Java Content Extraction Library. This project will allow access to all of the components in a PDF document.
        </Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Tika</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/lucene/tika/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Bouncy Castle encryption libraries</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.2-incubating and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://www.apache.org/dist/lucene/tika/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Bouncy Castle encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk14-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.4</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk14-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://myfaces.apache.org/">
  <Name>Apache MyFaces Project</Name>
  <Contact><Name>Dennis Byrne</Name></Contact>
  <Product>
    <Name>Apache MyFaces</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/myfaces/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.1.2 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/myfaces/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://mynewt.apache.org/">
  <Name>Apache Mynewt (incubating) Project</Name>
  <Contact><Name>Sterling Hughes</Name></Contact>
  <Product>
    <Name>Apache Mynewt</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf?p=incubator-mynewt-core.git;a=tree;f=crypto/mbedtls;h=d5f6a7013f36a68d25b9232769a273e990278477;hb=HEAD">
        <Manufacturer>ARM mbed</Manufacturer>
        <Why>Uses open source mbed TLS for cryptographic and SSL/TLS capabilities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf?p=incubator-mynewt-core.git;a=tree;f=crypto/tinycrypt;h=13294d0db5cdf2b0e882839f8c204d7d2ddd3bd1;hb=HEAD">
        <Manufacturer>TinyCrypt</Manufacturer>
        <Why>Uses open source cryptography library with small footprint for constrained devices.</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf?p=incubator-mynewt-core.git;a=tree;f=net/ip/lwip_base/src/netif/ppp/polarssl;h=47a41b927b1faff57e562b0dac21c82c040e8025;hb=HEAD">
        <Manufacturer>PolarSSL</Manufacturer>
        <Why>Uses lightweight open source crypto blocks for ARM and MIPS architectures.</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://oltu.apache.org//">
  <Name>Apache Oltu Project</Name>
  <Contact><Name>Antonio Sanso</Name></Contact>
  <Product>
    <Name>Apache Oltu</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/oltu/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://ofbiz.apache.org/">
  <Name>Apache Open For Business Project</Name>
  <Contact><Name>David E. Jones</Name></Contact>
  <Product>
    <Name>Apache Open For Business</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/ofbiz/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>4.0 release branch</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/ofbiz/branches/release4.0/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://openejb.apache.org/">
  <Name>Apache OpenEJB Project</Name>
  <Contact><Name>David Blevins</Name></Contact>
  <Product>
    <Name>Apache OpenEJB</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/openejb/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/openejb/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>All 0.x</Names>
      <ECCN>n/a</ECCN>
    </Version>
  </Product>
 </Project>

 <Project href="https://orc.apache.org/">
  <Name>Apache ORC Project</Name>
  <Contact><Name>Owen O'Malley</Name></Contact>
  <Product>
    <Name>Apache ORC</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://github.com/apache/orc">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.6.0 and on</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://github.com/apache/orc">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://perl.apache.org/">
  <Name>Apache Perl Project</Name>
  <Contact><Name>Geoffrey Young</Name></Contact>
  <Product>
    <Name>mod_perl</Name>
    <Version>
      <Names>Perl-*-win32-bin-*.exe</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/perl/win32-bin/">
        <Manufacturer>ASF</Manufacturer>
        <Why>mod_perl module and Perl designed for use with SSL library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://poi.apache.org/">
  <Name>Apache POI Project</Name>
  <Contact><Name>Nick Burch</Name></Contact>
  <Product>
    <Name>Apache POI</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/poi/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>3.5 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/poi/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://polygene.apache.org/">
    <Name>Apache Polygene Project</Name>
    <Contact><Name>Niclas Hedhman</Name></Contact>
    <Product>
      <Name>Apache Polygene</Name>
      <Version>
        <Names>development</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://git-wip-us.apache.org/repos/asf?p=polygene-java.git;a=tree;hb=develop">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with Java Cryptography Extensions (JCE)</Why>
        </ControlledSource>
        <ControlledSource href="www.bouncycastle.org/download/bcprov-jdk15on-156.tar.gz">
          <Manufacturer>Bouncy Castle</Manufacturer>
          <Why>General-purpose encryption library for Java 1.5</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>2.1</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://git-wip-us.apache.org/repos/asf?p=polygene-java.git;a=tree;hb=a789141d5af7f9137dddb9bfc0f0e0af47ebec2d">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with Java Cryptography Extensions (JCE)</Why>
        </ControlledSource>
        <ControlledSource href="www.bouncycastle.org/download/bcprov-jdk15on-152.tar.gz">
          <Manufacturer>Bouncy Castle</Manufacturer>
          <Why>General-purpose encryption library for Java 1.5</Why>
        </ControlledSource>
      </Version>
    </Product>
  </Project>

 <Project href="http://shiro.apache.org/">
     <Name>Apache Shiro Project</Name>
     <Contact>
         <Name>Les Hazlewood</Name>
     </Contact>
     <Product>
         <Name>Apache Shiro</Name>
         <Version>
             <Names>development</Names>
             <ECCN>5D002</ECCN>
             <ControlledSource href="http://svn.apache.org/repos/asf/shiro/">
                 <Manufacturer>ASF</Manufacturer>
                 <Why>Designed for use with Java Cryptography Extensions (JCE)</Why>
             </ControlledSource>
         </Version>
         <Version>
             <Names>1.1 and later</Names>
             <ECCN>5D002</ECCN>
             <ControlledSource href="http://archive.apache.org/dist/shiro/">
                 <Manufacturer>ASF</Manufacturer>
                 <Why>Designed for use with Java Cryptography Extensions (JCE)</Why>
             </ControlledSource>
         </Version>
         <Version>
             <Names>1.0</Names>
             <ECCN>5D002</ECCN>
             <ControlledSource href="http://www.apache.org/dist/incubator/shiro">
                 <Manufacturer>ASF</Manufacturer>
                 <Why>Designed for use with Java Cryptography Extensions (JCE)</Why>
             </ControlledSource>
         </Version>
         <Version>
             <Names>All 0.x</Names>
             <ECCN>n/a</ECCN>
         </Version>
     </Product>
 </Project>

 <Project href="http://servicemix.apache.org/">
  <Name>Apache ServiceMix Project</Name>
  <Contact><Name>Guillaume Nodet</Name></Contact>
  <Product>
    <Name>Apache ServiceMix 3.x</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/servicemix/smx3/trunk">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="ftp://ftp.bouncycastle.org/pub/release1.36/bcprov-jdk14-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library API for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>All 3.x versions</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/servicemix/servicemix-3">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/xml/security/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="ftp://ftp.bouncycastle.org/pub/release1.36/bcprov-jdk14-136.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library API for Java 1.4.x</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache ServiceMix 4.x</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/servicemix/smx4/features/trunk">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>4.0-m1</Names>
      <ECCN>n/a</ECCN>
    </Version>
  </Product>
  <Product>
    <Name>Apache ServiceMix NMR</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/servicemix/smx4/nmr/trunk">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0-m1, 1.0-m2</Names>
      <ECCN>n/a</ECCN>
    </Version>
  </Product>
  <Product>
    <Name>Apache ServiceMix Kernel</Name>
    <Version>
      <Names>development</Names>
      <ECCN>n/a</ECCN>
    </Version>
    <Version>
      <Names>All 1.0 milestones</Names>
      <ECCN>n/a</ECCN>
    </Version>
  </Product>
 </Project>

 <Project href="http://servicecomb.apache.org/">
  <Name>Apache ServiceComb Project</Name>
  <Contact><Name>Willem Jiang</Name></Contact>
  <Product>
    <Name>Apache ServiceComb Java-Chassis</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf/servicecomb-java-chassis.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0.0-m1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf/servicecomb-java-chassis.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache ServiceComb Service-Center</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf/servicecomb-service-center.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="https://github.com/golang/go/tree/master/src/crypto">
        <Manufacturer>The golang Project</Manufacturer>
        <Why>General-purpose cryptography with Go Language</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0.0-m1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf/servicecomb-service-center.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="https://github.com/golang/go/tree/master/src/crypto">
        <Manufacturer>The golang Project</Manufacturer>
        <Why>General-purpose cryptography with Go Language</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache ServiceComb Pack</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf/servicecomb-pack.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.2.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf/servicecomb-pack.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://rocketmq.apache.org/">
  <Name>Apache RocketMQ Project</Name>
  <Contact><Name>Heng Du</Name></Contact>
  <Product>
    <Name>Apache RocketMQ</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf?p=rocketmq.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>rocketmq-4.0.0-incubating and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf?p=rocketmq.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>General-purpose cryptography library included with OpenSSL</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache RocketMQ ONS</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf?p=rocketmq-ons.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.8.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://gitbox.apache.org/repos/asf?p=rocketmq-ons.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with built in Java encryption libraries</Why>
      </ControlledSource>
      <ControlledSource href="http://www.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>Oracle</Manufacturer>
        <Why>General-purpose cryptography library (JCE) included with Java</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://apr.apache.org/">
  <Name>Apache Portable Runtime Project</Name>
  <Contact><Name>Garrett Rooney</Name></Contact>
  <Product>
    <Name>APR</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/apr/apr/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>APR-Util</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/apr/apr-util/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.9.x, 1.2.x</Names>
      <ECCN>n/a</ECCN>
    </Version>
    <Version>
      <Names>1.4.x and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/apr/apr-util/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://santuario.apache.org/">
  <Name>Apache Santuario Project</Name>
  <Contact><Name>Colm O hEigeartaigh</Name></Contact>
  <Product>
    <Name>Apache XML Security for Java</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/viewvc/santuario/xml-security-java/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Implements XML Signature and Encryption specs</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.5.x</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Implements XML Signature and Encryption specs</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache XML Security for C++</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Implements XML Signature and Encryption specs</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>


 <Project href="http://spamassassin.apache.org/">
  <Name>Apache SpamAssassin Project</Name>
  <Contact><Name>Justin Mason</Name></Contact>
  <Product>
    <Name>Apache SpamAssassin</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/spamassassin">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with SSL library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://search.cpan.org/dist/IO-Socket-SSL/">
        <Manufacturer>Steffen Ullrich</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>3.0.x and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/spamassassin/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with SSL library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://search.cpan.org/dist/IO-Socket-SSL/">
        <Manufacturer>Steffen Ullrich</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="https://spark.apache.org/">
  <Name>Apache Spark Project</Name>
  <Contact><Name>Matei Zaharia</Name></Contact>
  <Product>
    <Name>Apache Spark</Name>
    <Version>
      <Names>2.2.0 through 2.3.x</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/commons-crypto.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Authentication and encryption/decryption of network traffic</Why>
      </ControlledSource>
      <ControlledSource href="http://bouncycastle.org/download/bcprov-jdk15on-158.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.4.0 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/commons-crypto.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Authentication and encryption/decryption of network traffic</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://tomcat.apache.org/">
  <Name>Apache Tomcat Project</Name>
  <Contact><Name>Mladen Turk</Name></Contact>
  <Product>
    <Name>Apache Tomcat</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/tomcat/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>3.x and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/tomcat/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product id="tomcat-native-connector" href="http://tomcat.apache.org/">
    <Name>Apache Tomcat native connector</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/tomcat/connectors/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.x and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/tomcat/connectors/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE)</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

  <Project href="http://uima.apache.org/">
    <Name>Apache UIMA Project</Name>
    <Contact><Name>Marshall Schor</Name></Contact>
    <Product>
      <Name>Apache UIMA-AS</Name>
      <Version>
        <Names>development</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://svn.apache.org/repos/asf/incubator/uima/sandbox/trunk/uima-as">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with Apache ActiveMQ, and UIMA-AS includes Apache ActiveMQ in its distribution</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>all releases starting with 2.2.2-incubating</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://people.apache.org/dist/incubator/uima/source/uima-as/">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with Apache ActiveMQ, and UIMA-AS includes Apache ActiveMQ in its distribution</Why>
        </ControlledSource>
      </Version>
    </Product>
    <Product>
      <Name>Apache UIMA Addons</Name>
      <Version>
        <Names>development</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://svn.apache.org/repos/asf/uima/addons/trunk">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with, and includes, Apache Tika, which is in turn classifed 5D002</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>2.3.0 and later</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://svn.apache.org/repos/asf/uima/addons/trunk">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with, and includes, Apache Tika, which is in turn classifed 5D002</Why>
        </ControlledSource>
      </Version>
    </Product>
    <Product>
      <Name>Apache UIMA Addon Tika Annotator</Name>
      <Version>
        <Names>development</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://svn.apache.org/repos/asf/uima/addons/trunk/TikaAnnotator">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with, and includes, Apache Tika, which is in turn classifed 5D002</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>2.3.0 and later</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://svn.apache.org/repos/asf/uima/addons/trunk/TikaAnnotator">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with, and includes, Apache Tika, which is in turn classifed 5D002</Why>
        </ControlledSource>
      </Version>
    </Product>
    <Product>
      <Name>Apache UIMA-DUCC</Name>
      <Version>
        <Names>development</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://svn.apache.org/repos/asf/uima/sandbox/uima-ducc">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with Apache ActiveMQ, and UIMA-DUCC includes Apache ActiveMQ in its distribution</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>all releases starting with 1.0</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="http://archive.apache.org/dist/uima/ducc">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed for use with Apache ActiveMQ, and UIMA-DUCC includes Apache ActiveMQ in its distribution</Why>
        </ControlledSource>
      </Version>
    </Product>
  </Project>

 <Project href="http://vcl.apache.org/">
  <Name>Apache VCL Project</Name>
  <Contact><Name>Andy Kurth</Name></Contact>
  <Product>
    <Name>Apache VCL</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/vcl/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.1 to 2.2.2</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/vcl/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>2.3 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/vcl/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="https://github.com/phpseclib/phpseclib">
        <Manufacturer>phpseclib</Manufacturer>
        <Why>Publicly available encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://ws.apache.org/">
  <Name>Apache Web Services Project</Name>
  <Contact><Name>Ruchith Fernando</Name></Contact>
  <Product>
    <Name>Apache WSS4J</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/webservices/wss4j/trunk/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="www.bouncycastle.org/download/bcprov-jdk15on-151.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.apache.org/dist/santuario/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.6</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/webservices/wss4j/branches/1_6_x-fixes/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="www.bouncycastle.org/download/bcprov-jdk15on-151.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java</Why>
      </ControlledSource>
      <ControlledSource href="http://www.apache.org/dist/santuario/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0 to 1.5</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/ws/wss4j/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk13-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.3</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/santuario/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Rampart/Java</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/webservices/rampart/trunk/java">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk13-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.3</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://xml.apache.org/security/dist/java-library/">
        <Manufacturer>Apache Santuario</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/ws/rampart/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk13-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.3</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://xml.apache.org/security/dist/java-library/">
        <Manufacturer>Apache Santuario</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Rampart/C</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/webservices/rampart/trunk/c/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.09 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/ws/rampart/c/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.openssl.org/source/">
        <Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Synapse</Name>
    <Version>
      <Names>1.0, 1.1, 1.1.1, 1.2, 2.0.0</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/synapse/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk13-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.3</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-ext-jdk15-140.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk14-140.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://xml.apache.org/security/dist/java-library/">
        <Manufacturer>Apache Santuario</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>
 <Project href="http://synapse.apache.org/">
  <Name>Apache Synapse Project</Name>
  <Contact><Name>Paul Fremantle</Name></Contact>
  <Product>
    <Name>Apache Synapse</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/synapse">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk13-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.3</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-ext-jdk15-140.jar">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk14-140.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://xml.apache.org/security/dist/java-library/">
        <Manufacturer>Apache Santuario</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.1.1 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/synapse/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk13-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.3</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcmail-jdk15-132.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://xml.apache.org/security/dist/java-library/">
        <Manufacturer>Apache Santuario</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>
 <Project href="http://wicket.apache.org/">
  <Contact><Name>Janne Hietamaki</Name></Contact>
  <Name>Apache Wicket Project</Name>
  <Product>
    <Name>Apache Wicket</Name>
    <Version>
      <Names>1.3, development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/wicket/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

 <Project href="http://mina.apache.org/">
  <Name>Apache MINA Project</Name>
  <Contact><Name>Julien Vermillard</Name></Contact>
  <Product>
    <Name>Apache MINA</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/mina/trunk">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0, 1.1, 2.0</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/mina/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache Vysper</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/mina/sandbox/vysper">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk15-140.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache FtpServer</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/mina/ftpserver">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>1.0</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/mina/ftpserver/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
    </Version>
  </Product>
  <Product>
    <Name>Apache SSHD</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/mina/sshd">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
      <ControlledSource href="http://www.bouncycastle.org/download/bcprov-jdk15-140.tar.gz">
        <Manufacturer>Bouncy Castle</Manufacturer>
        <Why>General-purpose encryption library for Java 1.5</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

  <Project href="http://wookie.apache.org/">
  <Name>Apache Wookie Project</Name>
  <Contact><Name>Scott Wilson</Name></Contact>
  <Product>
    <Name>Apache Wookie</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://svn.apache.org/repos/asf/wookie/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/santuario/java-library/">
        <Manufacturer>Apache Santuario</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
    <Version>
      <Names>0.13 and later</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="http://archive.apache.org/dist/wookie/">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with encryption library</Why>
      </ControlledSource>
      <ControlledSource href="http://archive.apache.org/dist/santuario/java-library/">
        <Manufacturer>Apache Santuario</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
    </Version>
  </Product>
 </Project>

  <Project href="http://ignite.apache.org/">
    <Name>Apache Ignite Project</Name>
    <Contact>
      <Name>Denis Magda</Name>
    </Contact>
    <Product>
      <Name>Apache Ignite</Name>
      <Version>
        <Names>development</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://gitbox.apache.org/repos/asf/ignite.git">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed to use with built-in Java Cryptography Architecture (JCA)</Why>
        </ControlledSource>
        <ControlledSource href="https://www.oracle.com/technetwork/java/javase/downloads/index.html">
          <Manufacturer>Oracle</Manufacturer>
          <Why>Designed to use with built-in Java encryption libraries (JCE)</Why>
        </ControlledSource>
        <ControlledSource href="http://www.openssl.org/source/">
          <Manufacturer>The OpenSSL Project</Manufacturer>
          <Why>Designed to use General Purpose cryptography library included with OpenSSL</Why>
        </ControlledSource>
        <ControlledSource href="https://dotnet.microsoft.com/download">
          <Manufacturer>Microsoft</Manufacturer>
          <Why>Designed to use .NET Framework Cryptography Model</Why>
        </ControlledSource>
        <ControlledSource href="https://dotnet.microsoft.com/download">
          <Manufacturer>.NET Foundation</Manufacturer>
          <Why>Designed to use .NET Core, and build in Cryptography</Why>
        </ControlledSource>
        <ControlledSource href="http://www.jcraft.com/jsch/">
          <Manufacturer>JCraft, Inc.</Manufacturer>
          <Why>Provides encryption SSH library</Why>
        </ControlledSource>
        <ControlledSource href="http://eclipse.org/jetty">
          <Manufacturer>The Eclipse Foundation</Manufacturer>
          <Why>HTTPS support in Jetty (uses SSL)</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>2.5.0 - latest</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://gitbox.apache.org/repos/asf/ignite.git">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed to use with built-in Java Cryptography Architecture (JCA)</Why>
        </ControlledSource>
        <ControlledSource href="https://www.oracle.com/technetwork/java/javase/downloads/index.html">
          <Manufacturer>Oracle</Manufacturer>
          <Why>Designed to use with built-in Java encryption libraries (JCE)</Why>
        </ControlledSource>
        <ControlledSource href="http://www.openssl.org/source/">
          <Manufacturer>The OpenSSL Project</Manufacturer>
          <Why>Designed to use General Purpose cryptography library included with OpenSSL</Why>
        </ControlledSource>
        <ControlledSource href="https://dotnet.microsoft.com/download">
          <Manufacturer>Microsoft</Manufacturer>
          <Why>Designed to use .NET Framework Cryptography Model</Why>
        </ControlledSource>
        <ControlledSource href="https://dotnet.microsoft.com/download">
          <Manufacturer>.NET Foundation</Manufacturer>
          <Why>Designed to use .NET Core, and build in Cryptography</Why>
        </ControlledSource>
        <ControlledSource href="http://www.jcraft.com/jsch/">
          <Manufacturer>JCraft, Inc.</Manufacturer>
          <Why>Provides encryption SSH library</Why>
        </ControlledSource>
        <ControlledSource href="http://eclipse.org/jetty">
          <Manufacturer>The Eclipse Foundation</Manufacturer>
          <Why>HTTPS support in Jetty (uses SSL)</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>2.4.0</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://gitbox.apache.org/repos/asf/ignite.git">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed to use with built-in Java Cryptography Architecture (JCA)</Why>
        </ControlledSource>
        <ControlledSource href="https://www.oracle.com/technetwork/java/javase/downloads/index.html">
          <Manufacturer>Oracle</Manufacturer>
          <Why>Designed to use with built-in Java encryption libraries (JCE)</Why>
        </ControlledSource>
        <ControlledSource href="https://dotnet.microsoft.com/download">
          <Manufacturer>Microsoft</Manufacturer>
          <Why>Designed to use .NET Framework Cryptography Model</Why>
        </ControlledSource>
        <ControlledSource href="https://dotnet.microsoft.com/download">
          <Manufacturer>.NET Foundation</Manufacturer>
          <Why>Designed to use .NET Core, and build in Cryptography</Why>
        </ControlledSource>
        <ControlledSource href="http://www.jcraft.com/jsch/">
          <Manufacturer>JCraft, Inc.</Manufacturer>
          <Why>Provides encryption SSH library</Why>
        </ControlledSource>
        <ControlledSource href="http://eclipse.org/jetty">
          <Manufacturer>The Eclipse Foundation</Manufacturer>
          <Why>HTTPS support in Jetty (uses SSL)</Why>
        </ControlledSource>
      </Version>
      <Version>
        <Names>1.0.0 - 2.3.0</Names>
        <ECCN>5D002</ECCN>
        <ControlledSource href="https://gitbox.apache.org/repos/asf/ignite.git">
          <Manufacturer>ASF</Manufacturer>
          <Why>Designed to use with built-in Java Cryptography Architecture (JCA)</Why>
        </ControlledSource>
        <ControlledSource href="https://www.oracle.com/technetwork/java/javase/downloads/index.html">
          <Manufacturer>Oracle</Manufacturer>
          <Why>Designed to use with built-in Java encryption libraries (JCE)</Why>
        </ControlledSource>
        <ControlledSource href="http://www.jcraft.com/jsch/">
          <Manufacturer>JCraft, Inc.</Manufacturer>
          <Why>Provides encryption SSH library</Why>
        </ControlledSource>
        <ControlledSource href="http://eclipse.org/jetty">
          <Manufacturer>The Eclipse Foundation</Manufacturer>
          <Why>HTTPS support in Jetty (uses SSL)</Why>
        </ControlledSource>
      </Version>
    </Product>
  </Project>

</eccnmatrix>