11-29-2007 12:23 PM
Hi Experts,
I would like to know whether there is any information available on ABAP Secure programming to adhere to ITAR in SAP R/3 4.7.
Would appreciate if you give any pointers.
Thanks,
Best regards,
Prashant
12-12-2007 8:03 AM
Hi Prashant
ITAR deals with export regulations concerning also cryptographic products.
In general there is (by default) no crypto contained in SAP R/3 4.7 that falls under ITAR. However, if you start to modify or add ABAP code and include any crypto functionality, you are responsible to adhere to ITAR yourself.
Usually the SAP secure programming guide dictates to SAP programmers to include any cryptographic functionality (when needed) as a "pluggable function". This means that the code must be able to run without crypto, even if it is then not safe.
I hope that this helps.
Best regards, Kristian