# Tag Info

You need to clearly distinguish between the DualEC DRBG algorithm and the elliptic curves over which it is defined. The backdoor in DualEC DRBG needs the attacker to choose P and Q such that they know the scalar $k$ for which $P=kQ$. Pretty much any algorithm which fixes both public keys at the same time without going through private keys is fine. For ...