Comment by 1sha
1 day ago
drand48() could be one of hundreds of methods that were tried to produce specific values with plausible deniability and happened to produce them. The other searches were discarded.
1 day ago
drand48() could be one of hundreds of methods that were tried to produce specific values with plausible deniability and happened to produce them. The other searches were discarded.
That could be a valid suspicion if the RNG chosen was particularly obscure. drand48 isn't - it's part of the standard C library.
Not really plausible if it was used for all the curves.