Large companies already routinely do crypto work in Switzerland. Note that ITAR also covers software that has hooks on which you can easily integrate crypto modules (Kerberos, for instance; see the difference between the MIT "Bones" distribution and the US-only one), so it's likely that more than just the crypto stuff has to be done outside the US. Harald A