> If there are some known weak points in the space that attackers look for, it's probably good to avoid those. Presuming attempts to discriminate don't introdu

> If there are some known weak points in the space that attackers look for, it's probably good to avoid those. Presuming attempts to discriminate don't introduce greater risks, like even larger biases, introduction of side channels, more bug-prone code, etc. Modern crypto seems to try to balance both concerns. For example, by provably reducing the space of problematic values to something so miniscule that it can be ignored in implementations.