For UK, it's the Computer Misuse Act of 1990 at http://www.legislation.gov.uk/ukpga/1990/18/section/3A http://www.legislation.gov.uk/ukpga/1990/18/section/3A wi

For UK, it's the Computer Misuse Act of 1990 at http://www.legislation.gov.uk/ukpga/1990/18/section/3A http://www.legislation.gov.uk/ukpga/1990/18/section/3A with things like, among other things, "A person is guilty of an offence if he supplies or offers to supply any article believing that it is likely to be used to commit, or to assist in the commission of, an offence under [section 1, 3 or 3ZA]." and "(4)In this section “article” includes any program or data held in electronic form." so it is quite explicitly about tool making - with the quoted criteria about the belief/intent separating whether it's a crime or not. Though it seems that I made a mistake about the age of that law - it seems that this particular section of the "1990" law was actually inserted in 2006 with the amendments introduced by the Police and Justice Act 2006 http://www.legislation.gov.uk/ukpga/2006/48/section/37 http://www.legislation.gov.uk/ukpga/2006/48/section/37 so it's old but not that old.