Samsung reportedly knows about that for years, but has nevertheless been using the compromised key.