For DES, NSA proposed new S-box values that turned out to be better at resisting differential cryptoanalysis -- and differential cryptanalysis would not be disc

For DES, NSA proposed new S-box values that turned out to be better at resisting differential cryptoanalysis -- and differential cryptanalysis would not be discovered by people outside the NSA for years. Maybe this is just how masterfully deceitful they are.