&gt; So instead, they generated their own private keys and embedded them in the CSPRNGs of the VPNs they sold to customers.<p>Isn&#x27;t it possible to still get this PRNG right by discarding the private part?<p>Not that mere use of such infamous algorithm isn&#x27;t crazy anyway, especially since even if they did the right thing they can&#x27;t prove it.