The DMCA outlaws bypassing copy protection schemes and access controls. It explicitly _exempts_ (ie, does not make illegal) bypassing copy protection for legal reverse engineering activity, including security research.

Read the DMCA. It's surprisingly readable. It does not outlaw reverse engineering.