It's not like the Debian bug, because that would be something everyone can detect and exploit. The interesting case with of this backdoor is that it can only be

It's not like the Debian bug, because that would be something everyone can detect and exploit. The interesting case with of this backdoor is that it can only be abused by the person who has the secret points used to generate the parameters. There's been quite some research about the exploitability of this construction: http://dualec.org/ http://dualec.org/ https://projectbullrun.org/dual-ec/ https://projectbullrun.org/dual-ec/