Daniel Bernstein, the defendant in the landmark lawsuit that legalized cryptography (over howls of protest from the NSA) engages in a thought-experiment about how the NSA might be secretly undermining crypto through sabotage projects like BULLRUN/EDGEHILL.
Making sure
crypto stays insecure [PDF/Daniel J Bernstein]
(via O'Reilly Radar)