However, he did draft Extended Random which made it much easier to exploit Dual_EC in the context of TLS (which he is an expert of). This is not evidence, but

However, he did draft Extended Random which made it much easier to exploit Dual_EC in the context of TLS (which he is an expert of). This is not evidence, but this is a reason for casting suspicion.