There are rumors they can even decrypt HTTPS but I bet they would do their best to hide that if they actually could.