Comment by cube2222

Those last three are pretty concerning, I don't really understand what they mean:

> - Providing cryptology services aiming to ensure confidentiality without certified declaration,

> - Providing a cryptology tool not solely ensuring authentication or integrity monitoring without prior declaration,

> - Importing a cryptology tool ensuring authentication or integrity monitoring without prior declaration.

What does "without certified declaration" mean?

The others are pretty non-surprising, if the comms were unencrypted and the company refused to cooperate.