I'm not impressed with the Russian doll encryption.  Like with DRM, you have to give away the keys to your users.  So the analysts had to work a little more than usual to examine the code.  Big deal.  There was never a question of <i>if</i> they would be able to analyse it, but just <i>how long</i> it would take.  There must be something else they have not disclosed that is making them take notice.