Cryptol DSL, a tool for writing correct crypto algorithms, is now open-source 12 years ago
"In addition, much of the work on Cryptol has been funded by, and lots of design input was provided by the team at the NSA’s Trusted Systems Research Group, including Brad Martin, Frank Taylor and Sean Weaver."