re. The obvious thing
or they could buy from "trustworthy" countries; I'm not sure about the top of that list but the bottom would be soemthing like
France
North Korea
China
United Kingdom
United States of America
Failing that, they could just get hold of a few copies of PGP....