And that's exactly what had everyone else scratching their heads, too! There are plenty of slow random number generators. They're easily built from cryptograph

And that's exactly what had everyone else scratching their heads, too! There are plenty of slow random number generators. They're easily built from cryptographic hash functions [1]. Heck, use something like Bcrypt as your hash and you can get as many seconds per number as you like. The reason we don't use them even though they work perfectly well is that they are too slow. The challenge is making a fast PRNG that can maintains the properties of cryptographic randomness. That's why everyone was so confused with dual EC. [1] http://en.wikipedia.org/wiki/Cryptographic_hash_function#Use_in_building_other_cryptographic_primitives http://en.wikipedia.org/wiki/Cryptographic_hash_function#Use...