It is implied that the NSA surveilled Petreus' gmail using naris by capturing backbone data which implies that the NSA has cracked 128-bit SSL. Or maybe they just got it from google...
Wouldn't it make sense that the NSA owns a few Certificate Authorities and gets access that way? They try to have backdoors installed for them everywhere according to that whistleblower.