A backdoor into a widely-used SSH library was discovered recently by a person who noticed that the SSH process took longer than usual and decided to check the source code.