Hot answers tagged elliptic-curves
You need to clearly distinguish between the DualEC DRBG algorithm and the elliptic curves over which it is defined. The backdoor in DualEC DRBG needs the attacker to choose P and Q such that they know the scalar $k$ for which $P=kQ$. Pretty much any algorithm which fixes both public keys at the same time without going through private keys is fine. For ...
Only top voted, non community-wiki answers of a minimum length are eligible