&gt; and not outright malicious.<p>That ship may have already sailed. They could&#x27;ve pulled a decent &quot;honestly, we had no idea!&quot; excuse pre-2013, when only <i>most</i> of the cryptography community assumed the Dual EC was both backdoored <i>and</i> useless for its intended purpose, but not after it was <i>confirmed</i> by Snowden&#x27;s documents that the NSA backdoored Dual EC, and yet they continued to use it.<p>And now, when they found out a(nother) nation state was using it, their &quot;fix&quot; is to change the parameters again instead of burning it with fire. That&#x27;s strike three.