As I said in my original message about Pegasus:
The NSA consider this kind of thing "crypto with a hole"
It's stupid, the hole is the crypto. But, the rest of
the code is considered by the Agency to be an "ancilliary
device" as defined under ITAR.