Here's my case. We have written app for Android smartphones which allows users to exchange secured cipher messages. For key-exchange we're using elliptic curve 112 bits, for messaging we're using DES 56 bits. We have chosen weak enough cryptography in order to satisfy all kind of limitations applied to cryptographic methods/algorithms and so on. Messages encrypted from sender to recipient (along whole channel).
Question: is it legal? Let's say for U.S. or EU countries? To my knowledge if algorithms confirms to Wassenaar Arrangement it's safe enough to use them.
Am I right? Or there're some "hidden string"?