So where exactly do they draw the line? You can still construct your software in such a way that there is a clean boundary between the crypto stuff and the rest.

Right. However, if you call things like "keysize" as oposed to "state" then they will look askance.

How exactly are crypto-hooks defined?

On a case-by-case basis. /r$