Comment by tptacek

The plot thickens: Willem Pinckaers suggested on Twitter that the code as presented doesn't in fact pass Dual_EC's output through the 3DES DRBG at all, but rather (in both versions) directly exposes the output of Dual_EC.

https://twitter.com/_dvorak_/status/679109591708205056