or rational here.) The issue is that, unless written very carefully, the crypto-less software is a "component of a cryptosystem", and therefore still requires permission to export.

Thanks for the hint. Oli.