State sponsorship doesn't matter, what matters is that it's secure. Everyone knew Dual-EC DRBG was likely backdoored, it stank to hell and back. There are dozen

State sponsorship doesn't matter, what matters is that it's secure. Everyone knew Dual-EC DRBG was likely backdoored, it stank to hell and back. There are dozens of other CSPRNGs, including other "state sponsored" ones, that pretty clearly aren't. There is also a whole world of crypto developed by people not associated with any state, including the modern ec25519/ChaCha based combinations (which are partly a response to the idea that the widely used NSA proposed ECC parameters may also be backdoored). There are trustable people doing things right with easy to use libraries you can just drop in today, with documented rationale for the designs and without any "magic numbers" (which are a telltale of the backdoored and suspected-backdoored NSA algorithms).