2 ms·
In this case, it could have been done. Dual_EC_DRBG hinges on the discrete log of two points being unknown; P and Q could have been both generated verifiably at
by pbsd 13y ago
In this case, it could have been done. Dual_EC_DRBG hinges on the discrete log of two points being unknown; P and Q could have been both generated verifiably at random.
- marshray 13y agoPerhaps something like "The smallest prime number not less than the base-2 expansion of pi*2^(n - 2)".