Presumably you'd start with the standard sort of attacks, e.g. compromising any kind of hardware random number generation present.