As I understand, the NSA has a kleptographic backdoor in Microsoft's CryptoAPI algorithms, which enable them to use a secret private key to decrypt secure communications which rely on asymmetric key generation. According to Wikipedia, this could be used for example to decrypt ssl communications between two computers on a network.
However, what is the true scope of this? Does this mean that every Microsoft product that implements any form of assymetric encryption could be vulnerable to this specific backdoor?
CNG also adds support for Dual_EC_DRBG, a pseudorandom number generator defined in NIST SP 800-90A that could expose the user to eavesdropping by the National Security Agency since it contains a kleptographic backdoor, unless the developer remembers to generate new base points with a different cryptographically secure pseudorandom number generator or a true random number generator and then publish the generated seed in order to remove the NSA backdoor. It is also very slow. It is only used when called for explicitly.
The Dual_EC_DRBG cryptographic pseudo-random number generator from the NIST SP 800-90A is thought to contain a kleptographic backdoor. Dual_EC_DRBG utilizes elliptic curve cryptography, and NSA is thought to hold a private key which, together with bias flaws in Dual_EC_DRBG, allows NSA to decrypt SSL traffic between computers using Dual_EC_DRBG for example.