The article says "even calls to functions to use strong authentication/encryption by providing an external library would have made it covered under export contr

The article says "even calls to functions to use strong authentication/encryption by providing an external library would have made it covered under export control." Would your proposal have been ruled out by this? They seem to have gone to considerable lengths to find a solution.