"The Open Smart Grid Protocol (OSGP) is a family of specifications published by the European Telecommunications Standards Institute (ETSI) used in conjunction w

"The Open Smart Grid Protocol (OSGP) is a family of specifications published by the European Telecommunications Standards Institute (ETSI) used in conjunction with the ISO/IEC 14908 control networking standard for smart grid applications." Not sure who to blame if it is deliberate, but seems unlikely to be NSA, and not just because of the unsubtlety (though NSA was also behind the quickly-spotted Dual EC DRBG). Even back before the Crypto Wars the NSA usually tried to have their cake and eat it too though, trying to make their crypto breakages to types of breakage that could only be exploited by a state-level adversary like themselves. Leaving 3 different key recoveries available is 2 more than NSA would have needed, and the additional weaknesses simply make it more likely that a first-year CS student would eventually figure out the problems.