As I said in my original message about Pegasus: The NSA consider this kind of thing "crypto with a hole" It's stupid, the hole is the crypto. But, the rest of the code is considered by the Agency to be an "ancilliary device" as defined under ITAR.