I am not a lawyer (IANAL), but if your application uses an external library or built-in OS service, US export restrictions on cryptography do not require an in depth review of your code and algorithms. The MSCrypto library that ships with the Windows OS has been signed off by the Feds for export (though its capabilities may be limited in some geopolitical regions), so apps that use the MSCrypto DLL functions don't have to go through an exhaustive review.
I've been part of the release cycle of several retail products that used MSCrypto to generate keys and encrypt/decrypt data, and the most we had to do to satisfy the US export restrictions was fill out a form that declared that we used MSCrypto, the key sizes we used, and for what purpose.
If you implement a crypto algorithm on your own, or you statically link crypto code into your exe or dll (not a separate DLL), and your software will be sold outside the US (doesn't have to be sold by you), you will likely be required to submit to an in depth review of your code and/or algorithms in order to get an export waiver.