So SHA-2, the foundations of how most of our secret computer shit keeps that shit secret, was designed by the NSA. And SHA-3, the heir-apparent to the cryptographic throne once SHA-2 has been retired, was designed by NIST. Now, it is probably pretty obvious why the NSA releasing cryptographic tools is, at best, sketchy as shit but NIST is just as sketchy and they've been getting freaky with the NSA for a long-ass time. ca 2006, they officially recommended an allegedly Cryptographically Secure Pseudorandom Number Generator as exactly that; cryptographically secure and appropriate for secret computer shit to continue to keep that shit secret. But this particular algorithm was strongly suspected to contain a deliberately inserted backdoor courtesy of the NSA and RSA Security, whom the NSA (allegedly) payed a shit ton of American United States Dollars to include this algorithm as the default algo in their widely-used software library RSA BSAFE. This backdoor was suspected as far back as 2004, a full 2 years before NIST recommended the thing in NIST SP 800-90A in 2006. This algorithm, Dual_EC_DRBG, remained in the NISt publication until 2014 in the aftermath of the Snowden leaks. almost 8 years and nearly a decade after the well-founded suspicions of the backdoor were made public.
The insanity of this setup is beyond belief. Our entire society is built on bullshit, and not the normal bullshit that society has always been built on. Extra-special A1 USDA-rated Bullshit.
To quote Dennis Franz, "it boggles the mind".