It's good that the NSA are seeking to be more open and transparent. A few things I'm curious about, though... > The NSA-generated elliptic curve points were n

It's good that the NSA are seeking to be more open and transparent. A few things I'm curious about, though... > The NSA-generated elliptic curve points were necessary for accreditation of the Dual_EC_DRBG but only had to be implemented for actual use in certain DoD applications. Why were the NSA-generated elliptic curve points have to be included in the standard for it to be accredited? Why did those points have to be used for certain DoD applications? Why not use random points? And why was it necessary for those points to be included in the standard? Why not leave it up to the implementer to decide what points to use?