Instead of using the NIST recommended curve points it uses self-generated basis points and then takes the output as an input to FIPS&#x2F;ANSI X.9.31 PRNG, which is the random number generator used in ScreenOS cryptographic operations.&quot;<p>Looks like they feed the output through a standard CPRNG. Assuming it&#x27;s true, that pretty much breaks the DUAL_EC attack because you can&#x27;t use the output of the final CPRNG to recover the DUAL_EC state.