[DateThing]

On your first point, I’m not aware of NSA weakening of DES. Only in-fact strengthening it against differential crypto analysis. Your link seems to echo that. Were you thinking of something else?

Of course, the fact the NSA was aware of differential crypto analysis some years before the rest of us is another thing…

[Dah00n]

This I guess?

https://en.wikipedia.org/wiki/Dual_EC_DRBG

[bArray]

> Of course, the fact the NSA was aware of differential crypto analysis some years before the rest of us is another thing…

It is more a case that somebody else discovered it and they were forced to get in-front of it.