It doesn&#x27;t really matter imho what the NSA did or did not do in relation to the code.  What matters is what they could have done once that code was in place.<p>Given the revelations of recent years, we must assume that they exploited anything they could.  Even if they didn&#x27;t, that is still the prudent security assumption to make.  Juniper speaks of a &quot;knowledgeable attacker&quot;.  Who is more knowledgeable an attacker than NSA?  Perhaps Juniper employees?  And how many are now working at&#x2F;for NSA or some like agency?<p>This is the problem with secret organizations that are willing to spin stories and tell lies.  The only prudent option is to fill all the blank spots in out knowledge with worst case scenarios.  Maybe NSA had nothing to do with this, but there is nothing they or Juniper can say to substantiate that fact because they are no longer completely trustworthy.  Math, code, these are not lies.