> then shouldn't person B not be able to decrypt the message? The RNG example is a way to create keys that make it trivial for "C in the middle" with the RNG d

> then shouldn't person B not be able to decrypt the message? The RNG example is a way to create keys that make it trivial for "C in the middle" with the RNG details to extract the contents. They are still valid, just not useful as keys. The Juniper attack and Dual EC exploit is a good real world example of compromising an RNG for passive decryption, although Dual EC was designed to be like that. https://www.cs.utexas.edu/~hovav/dist/juniper.pdf https://www.cs.utexas.edu/~hovav/dist/juniper.pdf