- Oct 17, 2011
I don't deal with that part of ITAR (but have with others) but that would then make sense if it's what is mostly restricting it. When PGP was new however, this was definitely the case (backdoor or weaken it, no compromise). If it stayed within USA it should be okay.. same reason I couldn't buy a PVS-14 easily here for a very long time (even when it's now ancient tech) but the yanks could play with them all day long.Crypto is ITAR-regulated in the U.S. I don't think there's need to turn over the source or deliberately install any backdoors but it is considered a weapon for the purposes of export.
Bit more on it there and it also sites EAR which is closely related with ITAR.