The NSA maintained a $250m/year “SIGINT Enabling Project” that inserted vulnerabilities into US cryptographic technology, and we only learned about it because an IT contractor downloaded all their PowerPoint decks.