The NSA has been doing some very bad things at a combined cost of $250 million per year. The NSAs decryption program goes by the name Bullrun and Cheesy Name The worst possible hypothetical I discussed appears to be true on a scale I couldnt even imagine. There are basically three ways to break a cryptographic system: attack the cryptography. Go after the implementation of the software, go after the software and software is a disaster. If your goal is mass surveillance, you need to build insecurity in.”]
Source: https://blog.cryptographyengineering.com/2013/09/06/on-nsa/