Availability of app store for France

[backthehox]

Please agree to the following

• I have searched existing issues for duplicates
• I agree to follow this project's Code of Conduct

Summary

Onekeepass seems not available for french customer in app store for Iphone

Motivation

i'm a security responsible for a company and i would like to deploy onekeepass for Iphone of the company as we use keepass to store users' passwords.

Considered Alternatives

upload app's directly into our modern Device management tool (Microsoft Intune) to deploy on company Iphone

Anything else?

No response

[jeyasankar]

Hi @backthehox ,

Unfortunately I could not make it available in the France App store because I do not know how to get the "French encryption declaration" as required by Apple. Not much information is available in English to apply and get such a declaration form from France

Once that is figured out sometime later, the app will be available in France App store.

[backthehox]

Hi jeyasankar, Ok understood, in case you need contact me maybe i can help. This kind of document is usually published by ANSSI which is the french regulation for cybersecurity. Regards, Le mer. 6 sept. 2023, 01:45, jeyasankar ***@***.***> a écrit :

…

Hi @backthehox <https://github.com/backthehox> , Unfortunately I could not make it available in the France App store because I do not know how to get the "French encryption declaration" as required by Apple. Not much information is available in English to apply and get such a declaration form from France Once that is figured out sometime later, the app will be available in France App store. — Reply to this email directly, view it on GitHub <#13 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ARSHRUZK2EP3WES3ULWI4DLXY62STANCNFSM6AAAAAA4KC33JQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[backthehox]

I found a guy that post link on git https://gist.github.com/chrisballinger/7239932 It point on official website Le mer. 6 sept. 2023, 01:45, jeyasankar ***@***.***> a écrit :

…

Hi @backthehox <https://github.com/backthehox> , Unfortunately I could not make it available in the France App store because I do not know how to get the "French encryption declaration" as required by Apple. Not much information is available in English to apply and get such a declaration form from France Once that is figured out sometime later, the app will be available in France App store. — Reply to this email directly, view it on GitHub <#13 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ARSHRUZK2EP3WES3ULWI4DLXY62STANCNFSM6AAAAAA4KC33JQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[levicki]

How does the French authorization form even apply here if your app uses only iOS provided encryption methods and not custom implementations? You probably just have to declare that you aren't using any new / non-standard / custom encryption (that is, if you aren't using 3rd party libraries).

[backthehox]

Hello Exactly that's the point, as far as i know it is just a declaration to record the encryption method Le sam. 28 oct. 2023 à 01:34, Igor Levicki ***@***.***> a écrit :

…

How does the French authorization form even apply here if your app uses only iOS provided encryption methods and not custom implementations? You probably just have to declare that you aren't using any new / non-standard / custom encryption (that is, if you aren't using 3rd party libraries). — Reply to this email directly, view it on GitHub <#13 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ARSHRU3YXJGOE6NGNVRWWTTYBRAHZAVCNFSM6AAAAAA4KC33JSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTOOBTGYYTENRQGE> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[jeyasankar]

Hi @levicki ,

The app uses rust crypto lib implementations for the standard encryption algorithms AES and ChaCha20 . The iOS provided encryption methods are not used. I do use the options for "Export Compliance Information" while submitting my app to App store like this

If I tried to make it available in App store for France, I am asked to fill certain forms with some French org and provide the reference number.

I will try to play with some of these options again and see. Also I will try to look how other similar apps do for this

Mean while is there any way I can get the forms in English and understand the requirement.

[levicki]

@jeyasankar Maybe I am wrong (I am not a native English speaker), but to me the wording on the first screenshot you posted implies that if you don't select both options you can still use iOS standard encryption?

Sadly I have no idea where to find translated documents.

[vrdsp0]

Hello,
Not a lawyer, but here are the links, in French only :
*FAQ on the statement to french Cyber authority ANSSI needed in case crypto means are used inside an app distributed through an App Store :
https://cyber[dot]gouv[dot]fr/ faq-demande-dautorisation
https://cyber[dot]gouv[dot]fr/ controle-reglementaire-sur-la-cryptographie-les-formulaires

*The statement to fill, it can be submitted by mail :
https://cyber[dot]gouv[dot]fr/sites/default/files/2022-09/crypto_declaration-demande_autorisation_operations_annexe1_v2%5B1%5D.pdf

*One relevant link on the law which describes steps for the statement :
https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000646995

[jeyasankar]

Thanks @vrdsp0

These links will be useful. I plan to prepare and submit these docs in few months and hopefully then I can then make it available in App Store in France

[rpc31]

Hello, any news on the French App Store integration? :)

[philopette]

Hello, any help needed for this French App Store integration? I'm not a lawyer, but I work in a Cybersecurity team, maybe I can provide information/advices ?

[jeyasankar]

Hi @rpc31 and @philopette ,

Sorry I could not get back earlier.

As I mentioned earlier, when I want to include France app store, Apple still shows
French encryption declaration form is only required if you’re distributing your app on the App Store in France

OneKeePass uses standard encryption algorithm provided by Botan crypto library.

Both Apple site as well as French site https://cyber.gouv.fr are not much help.

Here is some form https://cyber.gouv.fr/sites/default/files/2022-09/crypto_declaration-demande_autorisation_operations_annexe1_v2%5B1%5D.pdf that I found at https://cyber.gouv.fr/controle-reglementaire-sur-la-cryptographie-les-formulaires

I am not sure whether this is the latest. Also the form is in French. I do not know what to fill and where to submit etc

Hopefully somebody will be able to figure out what and where to get this 'French encryption declaration form' to satisfy Apple's requirement

Thanks