What is the legality of this? I'm concerned that in general cryptography web products are potentially illegal http://stackoverflow.com/questions/5308601/export-

What is the legality of this? I'm concerned that in general cryptography web products are potentially illegal http://stackoverflow.com/questions/5308601/export-compliance-and-aes256-in-iphone http://stackoverflow.com/questions/5308601/export-compliance... Also, how secure is AES 256 really? My understanding is that something encrypted with AES256 could be decrypted in my lifetime with a few million dollars worth of hardware and dedicated decryption workloads. It is a bit paranoid, but to me somewhat unsatisfactory that in theory someone with a large enough botnet could decrypt 'securely' encrypted data.