[Bartweiss]

Can you follow up on that? I've never heard that story and I'm really curious.

On the narrower point, though, it's been shown that Dual_EC_DRBG is broken, and that the NSA values compromised the implementation instead of strengthening it.

[hatsunearu]

S boxes in DES were originally nonexistent/vulnerable to differential cryptanalysis when IBM first made Lucifer.