MD5 and ITAR questions