[VengefulCynic]

To my mind, this sort of thing is a lot like crypto research. As a workman programmer, I know next to nothing about crypto algorithms so I can read the documents, but I can't provide much in the way of meaningful research. That said, I know that there are lot of interested crypto researchers out there who can provide meaningful analysis and who have an incentive to speak up if they find something. But on government-funded closed-source crypto algorithms, I have to take the NSA's word for it...