> So I don't think it's impossible, but even the NSA is finite. They probably have better ways to spend their time. IMHO, this is the best argument against suc

> So I don't think it's impossible, but even the NSA is finite. They probably have better ways to spend their time. IMHO, this is the best argument against such theoretical attacks. For more regular attacks against applications, I expect the NSA to be one of the most advanced organisations, since they can use the entire literature plus whatever they figure out on their own. But to have an entirely different attack vector, they would need to spend a similar level of research on this vector just to keep it competitive with open source research.