They may very well be able to find their own 0-day exploits, which are far more likely to even exist than a "crack a crypto algorithm" method (which often just doesn't exist).