The S-boxes were hardened against differential cryptanalysis long before it was publicly disclosed as a method (about a decade), largely because they got the team at IBM work on DES to keep the secret.

So it's entirely within reason to think the NSA has the potential to be a decade ahead of the public on matters of cryptography.