Maybe. The problem with getting such fundamental things wrong is that it's almost impossible to figure out every possible way to exploit it. I haven't looked

Maybe. The problem with getting such fundamental things wrong is that it's almost impossible to figure out every possible way to exploit it. I haven't looked at the code in question, but I'd be willing to bet that the NSA has figured out a way to exploit the broken multiplication which is completely unlike what the OpenSSL authors were considering.