>I must rely on encryption algorithms that are designed with subtle flaws that can take years, if not decades, to come to light. There's Dual_EC_DRBG . Are the

>I must rely on encryption algorithms that are designed with subtle flaws that can take years, if not decades, to come to light. There's Dual_EC_DRBG . Are there any other instances where this happened? And I thought barely anyone even used Dual_EC_DRBG because it was super slow. Did the author ever use it?