My understanding is that the First Amendment has won over ITAR. For several decades, a person without a security clearance has had no limitations on what they can publish on cryptography. ITAR applies only to executable software, not to theory or algorithms.

Back in the day when the cryptography wars were raging, people published listings of C code that implemented cryptographic algorithms. As written material these listings could not be banned or controlled. It was only when the C code was entered into a computer and compiled that ITAR applied.