Yes[1], export is controlled. Oracle Java contains an implementation of cryptographic primitives, similar in scope and purpose to OpenSSL. Microsoft does not s

Yes[1], export is controlled. Oracle Java contains an implementation of cryptographic primitives, similar in scope and purpose to OpenSSL. Microsoft does not sell products to any sanctioned countries[2]. Note that [1] has a giant loophole for open source software, which requires notice but not permission - so builds of .NET Core, OpenJDK, OpenSSL itself, and so on, can be exported no problem. Also, programs built WITH the primitives are "mass market", so are exemptable that way. [1]: https://www.bis.doc.gov/index.php/policy-guidance/encryption https://www.bis.doc.gov/index.php/policy-guidance/encryption [2]: https://www.microsoft.com/en-us/exporting/faq.aspx https://www.microsoft.com/en-us/exporting/faq.aspx