I am speaking from memory here but I think Jacob Appelbaum said in a speech
that SSH keys were broken and the NSA had made it not secure...
I believe you either make a confusion with:
SSL with a RC4 cypher:
http://www.theregister.co.uk/2013/09/06/nsa_cryptobreaking_bullrun_analysis/
(SSH does not use that)
or with small RSA keys:
http://www.pcworld.com/article/2064960/google-strengthens-its-ssl-configuration-against-possible-attacks.html
(OpenSSH's default is 2048 bit long);
or with the bug introduced in the Debian package (only) for the generation of
random numbers: https://www.debian.org/security/2008/dsa-1576 (corrected in
2008).
As for the transparent audit, I think (again from memory) that Theo de Radt
(the main guy behind OpenBSD) had refused to provide the results of an
independent review of OpenBSD code.
Any reference?
