I read in the CFR (Code of Federal Regulations) somewhere that 128-bit AES is under the threshold so can be self-classified (but IANAL!). Anything stronger and the legal constraints seemed to be more than onerous.
Cat is quantum undetermined in my book - maybe someone from Open Whisper Systems, Signal Foundation, or the Freedom of the Press Foundation will share some wisdom.
That cat is out of the bag.