The backdoor possibility was known in 2007 and the standard included a way to set your own constants (which no one used, true, but just because it was true for Dual EC in general).<p>I disagree that following the standard on that point and creating your own would be a smoking gun that the standard is malicious.  Rather, it could be a smoking gun that this implementation was.  If the tampering would likely be detected anyway, I&#x27;d argue it&#x27;s better to avoid attribution.