Doesn&#x27;t necessarily require a &#x27;rootkit&#x27;. Maybe it&#x27;s a smaller bit of subtle corruption of a random-number generator. Maybe even it&#x27;s an unintentional flaw that he learned about during an audit and then decided to exploit rather than fix.