I think it’s funny to think that the NSA has probably defeated RSA and those sketchy ECDSA curves, but they still haven’t broken AES because its symmetric.

that they do try to subvert standards processes.

This is why RSA is considered weak even at 4096. No hacker or APT is gonna break it but the NSA probably can and probably has, even if it was some loophole implementation bug.

When you assume nation state funding and leverage, a lot of baseline security standards go out the window.