From 2004 to 2013, RSA shipped security software — BSAFE toolkit and Data Protection Manager — that included a default cryptographically secure pseudorandom number generator, Dual EC DRBG that was later suspected to contain an alleged secret National Security Agency kleptographic backdoor. The alleged backdoor could have made data encrypted with these tools much easier to break for the NSA, which allegedly had the secret private key to the backdoor. Scientifically speaking, the alleged backdoor employs kleptography, and is, essentially, an instance of the Diffie Hellman kleptographic attack published in 1997 by Adam Young and Moti Yung.