The "attack" part of any ransomware is how they were able to get to the point where they can execute arbitrary command on my computer. Because once that is achieved, all bets are off.
A good argument could be that the NSA is violating the intent of Congress by weakening encryption standards which are essential to online commerce. Could even be extended to authentication standards which there can be no legal restriction on.