IIRC you're allowed to use any crypto you like and fix flaws that are found but you're also required to add flaws if asked to. Well they call it a "technical ca

IIRC you're allowed to use any crypto you like and fix flaws that are found but you're also required to add flaws if asked to. Well they call it a "technical capability notice" but it includes such things as "Installing, maintaining, testing or using software or equipment given to a provider by an agency." and "Removing a form of electronic protection applied by the provider, if the provider has an existing capability to remove this protection". You don't have to compromise your crypto you just need to install this black box library that does … something.