What if manufacturers pkey gets leaked? If you issue new pkey to them everything else produced by them before the leak will show up as counterfeit or what?
Interesting question by the way .... you need to learn from the developers ... but I think this problem they predicted and protected themselves
All crypto-tags will have their own encryption, so there will be no problems with protection.