One thing I think I recall from the prior coverage(*) but don't see mentioned in the thread: I believe Netscreen/Juniper had followed the appendix procedure an

One thing I think I recall from the prior coverage(*) but don't see mentioned in the thread: I believe Netscreen/Juniper had followed the appendix procedure and rekeyed the DualEC. If that's true, it would explain why NSA wouldn't have noticed a loss in observation capabilities, as some in the twitter thread remarked. But perhaps I'm misremembering the reporting. (*) Before someone asks, yes I worked at Juniper in the past, but never on netscreen: netscreen was an acquisition. Also this incident was after I worked there... so I don't know anything about this stuff that wasn't public.