The article only says they found a "security risk". I wonder what that is, and how it would allow identity theft if they are actually using public/private keys.

The article only says they found a "security risk". I wonder what that is, and how it would allow identity theft if they are actually using public/private keys. Did Estonia secretly backdoor their encryption?