Thanks for the quote, it's quite illuminating. This is actually essentially what I was arguing, not just moe's point: But all that demonstrate

Thanks for the quote, it's quite illuminating. This is actually essentially what I was arguing, not just moe's point: But all that demonstrates is that the NSA has an interest in being able to (legally) monitor encrypted communications. Which everyone already knows. I don't condone designing backdoors into products. Maybe I can research into BULLRUN more but the impression I had was that the intention was to subvert crypto in a way that only NSA could use (either via escrow or constants-up-their-sleeve), perhaps to take advantage of exploits that happened to get shipped to the commercial sector, but not to design broken gear that anyone could subvert if they know the secret handshake. Obviously even this is sneaky and shady as can be, but that goes with the territory (though @kgo would seem to agree that it's nefarious :-D). But even assuming malice here, I'd have said even at the time, with the ongoing changes to communication patterns across the world, that there's simply no way you can assume NSA isn't trying to hack everything they can. When I was reading Schneier a decade or more ago they were the very definition of Mallory, and nothing has changed on that since. But I suppose you're right, that people at the time weren't seeing NSA the same way I was.