Read up on crypto export controls as they were implemented in the 90s, and still are today for anything that falls under e.g. ITAR.

It's not a perfect way to block open source, but in practice it could be done and would mostly "work". The chilling effect and collateral damage would be massive though.