What happens when the people in charge of setting the standards for secure cryptography are also tasked with spying on private communications? What could an intelligence agency do with a secret back door into widely adopted crypto? Could the open-source community discover the hidden vulnerability and make us all safer?