http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html... "Simultaneously, the N.S.A. has been deliberately weakening the international encryption standards adopted by developers. One goal in the agency’s 2013 budget request was to “influence policies, standards and specifications for commercial public key technologies,” the most common encryption method. Cryptographers have long suspected that the agency planted vulnerabilities in a standard adopted in 2006 by the National Institute of Standards and Technology and later by the International Organization for Standardization, which has 163 countries as members. " As I have pointed out previously, you should probably assume that backdoors have been introduced into much OS security software.