I can't speak to any cybercrime laws (I'm simply not familiar enough with them), but the DMCA 1) only applies to mechanisms which protects copyright, and 2) has very explicit exemptions for the purpose of security research, among other things.