I once had to go through the process of buying a compiled encryption library from a US company, which involved filling in a multi page form basically pinky swearing I wasn't a terrorist and wasn't going to sell it to North Korea.

On the bright side I got to add "successfully managed the purchase of controlled munitions" to my CV.

You haven't heard of them * unless you build hardware that talks to other hardware

Then you've had lots of fun with EAR compliance.

That’s also probably why when publishing apps to app stores you have to attest to the forms of encryption your app uses.