Best i recall, from back when the PGP thing was going down, was that anything above 90-bit keys (or some such) was basically considered the equivalent of a military weapon.
So if you wanted to offer it to anyone outside of USA, you were treated as if you were trying to deal in tanks or fighter jets.
So if you wanted to offer it to anyone outside of USA, you were treated as if you were trying to deal in tanks or fighter jets.