Actually, this tool brings up the question: did NSA discover and exploit Heartbleed years ago? That is not a conspiracy theory, btw. A few weeks back, H.D. Mo

Actually, this tool brings up the question: did NSA discover and exploit Heartbleed years ago? That is not a conspiracy theory, btw. A few weeks back, H.D. Moore of Rapid7/Metasploit fame was on the Risky Business podcast. The topic of the week was bug bounty programs, and in particular the larger programs that aggregate individual vendors under a common umbrella - and notably a common set of guidelines. Moore mentioned that a recurring theme is that when researchers discover a new trick, they will the proceed to apply that trick to every possible vendor on the bounty program, netting 2-3k from each one they pop. In the same vein, I would find it odd if this extraction technique was not applied to every possible encryption target the NSA could think of.