* It seems like there was already a backdoor in place with the Dual EC in place. That Jupiner could use.<p>* Or maybe they had to use Dual EC because of government pressure but they changed the EC keypair to fuck with the NSA. NSA is not happy and changed it back.<p>* Or ...<p>In any case, what is clear is that a backdoored PRNG (Dual EC) was implemented behind a &quot;fake&quot; PRNG.<p>Someone knew that, and thus changed the EC keypair of the backdoored PRNG.<p>This is very shady.