Compromised approved (subsequently retracted) elliptic curve random number generator [1] Potentially-compromised elliptic curves used for Diffie-Hellman-Merkle

Compromised approved (subsequently retracted) elliptic curve random number generator [1] Potentially-compromised elliptic curves used for Diffie-Hellman-Merkle key agreement and digital signatures [2][3][4] [1] https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG [2] https://safecurves.cr.yp.to/rigid.html https://safecurves.cr.yp.to/rigid.html [3] https://www.hyperelliptic.org/tanja/vortraege/20130531.pdf https://www.hyperelliptic.org/tanja/vortraege/20130531.pdf [4] https://blog.cr.yp.to/20140323-ecdsa.html https://blog.cr.yp.to/20140323-ecdsa.html