I think this isn't about exporting cryptographic software so much as about not trading with certain countries (e.g. Iran, Cuba or North Korea) at all.