15 CFR 744.11 (up to date as of 4/24/2023)
§ 744.11 License requirements that apply to entities acting or at significant risk of acting contrary to the national security or foreign policy interests of the United States.
[...]
-
License requirement, availability of license exceptions, and license application review policy.
-
Standards related activity.
A license is not required for the release of “technology” or “software” designated EAR99 or controlled on the CCL for anti-terrorism reasons only, when such a release is for a “standards-related activity.” In addition, a license is not required for the release of the following ECCN “items” level paragraphs of “technology” or “software” specifically for the “development,” “production,” or “use” of cryptographic functionality when such a release is for a “standards-related activity:” “software” that is classified under ECCN 5D002.b or 5D002.c.1 (for equipment specified in ECCN 5A002.a and 5A002.c only); “technology” that is classified under ECCN 5E002 (for equipment specified in ECCN 5A002.a, .b and .c); and “technology” for software controlled under ECCN 5D002.b or .c.1 (for equipment specified in ECCN 5A002.a and .c only).