This is a good read, though it curiously omits mentioning that the NSA's twiddling of DES's S-boxes turned out to have made DES stronger rather than weaker. That seems like a pretty important note in the story.

(http://en.wikipedia.org/wiki/Data_Encryption_Standard#NSA.27...)