China passes law to promote cryptography development

The Chinese government has passed a law regulating the use and development of cryptography. The law will come into effect on January 1, 2020. The law distinguishes between secret government cryptography and commercial cryptography.

The law is needed to regulate the use and management of cryptography, promote its development and ensure the security of cyberspace and information, the Chinese government said, according to state news agency Xinhua. The law distinguishes between core, general and commercial cryptography.

The core and general cryptography are intended for government use and are strictly regulated by the authorities. The law describes, among other things, that government communication and storage of sensitive state data must be encrypted. The rules also describe supervision, management and measures in the event of security problems. Furthermore, the law emphasizes that cryptographic authorities must monitor that staff adhere to the law and exercise discipline.

Commercial cryptography is for the security of information, other than state secrets. This encryption is for citizens and businesses. The Chinese government encourages its development as long as its research, production, sale and import and export does not harm state security, public interest or other rights of citizens.

The law also describes safeguards regarding ‘the authentication’ of commercial cryptography. It is not clear whether the government requires the incorporation of backdoors or other weaknesses. In general, the state encourages the research and use of science and technology for cryptography and claims to protect intellectual property in this field.