> Looking more closely at this, the backdoor is almost certainly based on the back-doored random number generator, Dual_EC_DRBG, which is implemented as NIST SP

> Looking more closely at this, the backdoor is almost certainly based on the back-doored random number generator, Dual_EC_DRBG, which is implemented as NIST SP 800-90A. This doesn't have to be backdoored. It could simply be a bug in their hardware RNG that uses something that isn't public to break it. Or something that Cavium did not realise was vulnerable.