> The container format itself is really just a giant mathematical mess -- there really isn't anything to backdoor there. The container itself can actually be '

> The container format itself is really just a giant mathematical mess -- there really isn't anything to backdoor there. The container itself can actually be 'backdoored' by a malicious client by eg saving a duplicate of the master key, or generating a master key using a deliberately weak RNG.