Anything with 64b+ encryption must be reported [1]. Strong encryption is still subject of export restrictions. For example, Java need special unlock to enable encryption 128bits+

[1] https://www.federalregister.gov/articles/2010/06/25/2010-150...