My best guess would be a bunch of friends in a crypto lab cooked it up. It's not that there were no leaks. There were reviews done in the cryptography mailing list and changes were made. Just that they happened publicly online. The first idea was proposed in 2008, while the client was first launched in 2009.