Can anyone point me to a document that clearly states the laws governing the export of software with less than 40 bits worth of encryption. The ITAR made my head hurt. (damn lawyers) thanks msew