It seems to be a true statement: Dual EC is used to seed a X9.31 generator with 3DES, where 8 bytes are the initial seed V, and the remaining 24 are K (cf. [1]). I don&#x27;t see any other usage of Dual EC other than to self-test and to seed X9.31.<p>Oddly, you can disable the Dual EC seeding with the flag &#x27;one-stage-rng&#x27;. But not the other way around.<p>[1] <a href="http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cavp&#x2F;documents&#x2F;rng&#x2F;931rngext.pdf" rel="nofollow">http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cavp&#x2F;documents&#x2F;rng&#x2F;931rngext...</a>