Yes, just about any PRNG is more robust than DUAL_EC. It's hard to implement correctly, its performance in software "is rotten"[0]. And even before the backdoor

Yes, just about any PRNG is more robust than DUAL_EC. It's hard to implement correctly, its performance in software "is rotten"[0]. And even before the backdoor was discovered, the constants were suspect, and you can never get rid of that in your own implementation, as you have to generate those numbers then, then you are suspect. [0]: http://blog.cryptographyengineering.com/2013/12/a-few-more-notes-on-nsa-random-number.html http://blog.cryptographyengineering.com/2013/12/a-few-more-n...