There are a number of properties that a carefully designed asymmetric backdoor is expected to have. NOBUS (Nobody But Us) and forward-secrecy are among them. With a forward-secret backdoor, if a reverse­-engineer breaches the key-generator, then the previously stolen information remains confidential.<p>If the key-generator embeds a secret key (for seed exfiltration), the backdoor design will never be robust against reverse engineering. In fact, exposure of the embedded key gives to the attacker the ability to retroactively factor with ease the moduli of public-keys generated in the past, and recover the private-keys.<p>The designs of Curve25519 and illusoryTLS embed only an elliptic-curve public-key. Therefore, the exploitation requires access to the associated private-key &#x2F;i.e., NOBUS property).<p>For the longer story about the sorrow state of the Web PKI and the nitty gritty details on this cryptographic backdoor, you may want to review the illusoryTLS whitepaper <a href="http:&#x2F;&#x2F;conference.hitb.org&#x2F;hitbsecconf2015ams&#x2F;wp-content&#x2F;uploads&#x2F;2014&#x2F;12&#x2F;WHITEPAPER-The-illusoryTLS-Asymmetric-Backdoor.pdf" rel="nofollow">http:&#x2F;&#x2F;conference.hitb.org&#x2F;hitbsecconf2015ams&#x2F;wp-content&#x2F;upl...</a>