The DMCA Anti-circumvention clause explicitly makes an exception for "security testing" and "encryption research", amongst others. Search for those terms on this page:
http://www.law.cornell.edu/uscode/text/17/1201
I am no law scholar, but I get the impression that, in general, reverse engineering and research are exempt from most forms of IP protection (which is what the DMCA is).