encryption exports

[sgcccdc @ citec . qld . gov . au]

Hi,

I guess this is a little off-topic, but no more than some recent
stuff :-)

Can someone illuminate me (and possibly others) on the exportability
of RC4-based systems.

Here's what I know.

There are several VPN products around using RC4 encryption. In all
cases the "international" version uses 40-bits and the "domestic"
128-bits.

Now my questions:

1) Is 128-bit RC4 exportable from the US to a gov't/financial body?

2) If I have a head office in the US and branch offices elsewhere in
   the world what are the export restrictions?

3) If I have a branch office in the US and I am a gov't body, what
   if any, are the export restrictions?

Thanks

Colin