Provide guidance regarding what constitutes "cryptography"
Submitted by Wayne Beaton @wbeaton
Link to original bug (#552763)
Description
We are required to report use of cryptography to the US government. In order to do this, we must track the use of cryptography. Currently, we do this via IPzilla by marking project code and third party CQs with the cryptography keyword.
Use of cryptography takes two forms: either the project implements a cryptographic algorithm itself or it leverages third party content that does.
At this point, I'm not quite sure how to expand on that, but we need something better than "I'll know cryptography when I see it".
We need to add content to the handbook to discuss what constitutes cryptography and how to keep track of it (open a CQ).