> From a purely technical perspective, Dual_EC_DRBG is still secure. I think that depends on the techniques you're thinking of. The usual way of proving such a

> From a purely technical perspective, Dual_EC_DRBG is still secure. I think that depends on the techniques you're thinking of. The usual way of proving such a system is secure is to reduce a break to a solution of a bedrock problem like discrete log, and according to the second reference in the OP, "Cryptanalysis of the Dual Elliptic Curve Pseudorandom Generator", no such proof was provided in this case. I would say that without such a proof, it's not "technically" secure.