It has long been speculated that NSA is able to eavesdrop on even encrypted traffic. Researchers think they have figured out how.
The Snowden documents also hint at some extraordinary capabilities: they show that NSA has built extensive infrastructure to intercept and decrypt VPN traffic and suggest that the agency can decrypt at least some HTTPS and SSH connections on demand.
…
It shows that the agency’s budget is on the order of $10 billion a year, with over $1 billion dedicated to computer network exploitation, and several subprograms in the hundreds of millions a year.
— How is NSA breaking so much crypto?
In order words, really expensive and dedicated hardware. Something only state actors can afford.