[ycmbntrthrwaway]

New encryption (public) key is selected by the attacker, so he knows the decryption (private) key. Basically attacker just puts real device offline and registers his own device.

[Jarwain]

Wouldn't the attacker need to be authenticated as the user of the real device for this to work?