NSA themselves have used Dual_EC_DRBG (which can be distinguished from a PRF even if you don&#x27;t have the &#x27;backdoor key&#x27;: it&#x27;s not just backdoored and slow, it&#x27;s <i>bad</i> - and they know that). GCHQ behaves even worse and is at this point almost entirely out of control.<p>In either case, I feel information assurance and signals intelligence arms really should never have been the same agency: they are roles entirely at odds with each other and do not seem to even have their own governments&#x27; equities properly balanced, nor their recommendations always having been given in good faith. So be cautious drawing any conclusions from their advice.<p>Unfortunately, that is not the sort of &#x27;reform&#x27; that either government is interested in, particularly my own. It&#x27;s quite depressing, really.