I would put it in the key generation algorithm used for the encryption. If that algorithm was somehow backdoored (like the dual-ec curve, or just by (assymertic

I would put it in the key generation algorithm used for the encryption. If that algorithm was somehow backdoored (like the dual-ec curve, or just by (assymertically) encrypting the key and putting it in the identifier. Then the RaaS could just use the backdoor to recover the key.