I wonder who puts in more expert man-hours into safeguarding/defeating crypto: the US alphabet soup agencies, or the rest of the of the "worldwide cryptography community". I'm fairly certain the government spends more dollars (doing things like factoring enough primes AOT to be able to decrypt ~20% of all https traffic in realtime[1]). Often things that community concludes to be "unlikely" or "difficult" are well within the governments ability - cue "SSL added and removed here ;-)"
I think the fact that the cryptography community didn't pick up on Crypto AG's subterfuge says a lot, IMO.
1. https://arstechnica.com/information-technology/2015/10/how-t...
You might like djb's article "Entropy Attacks!": https://blog.cr.yp.to/20140205-entropy.html
The cryptography community seems to already be aware of this risk. I've read about random number algorithms that mix the results of many randomness sources so that one compromised source cannot compromise the result.
> and the next-best targets would be "enclaves"
Yeah, we should watch out for this. Secure cryptoprocessors are a great thing but we need to be able to trust them. We already have hardware that runs free software but the chip itself can of course be compromised...
> then back-dooring the algorithms themselves
I trust that the worldwide cryptography community will never let that happen. From what I've read they no longer trust the NSA implicitly.