I wonder who puts in more expert man-hours into safeguarding/defeating crypto: the US alphabet soup agencies, or the rest of the of the "worldwide cryptography community". I'm fairly certain the government spends more dollars (doing things like factoring enough primes AOT to be able to decrypt ~20% of all https traffic in realtime[1]). Often things that community concludes to be "unlikely" or "difficult" are well within the governments ability - cue "SSL added and removed here ;-)"

I think the fact that the cryptography community didn't pick up on Crypto AG's subterfuge says a lot, IMO.

1. https://arstechnica.com/information-technology/2015/10/how-t...