Comment by mitxela
13 hours ago
There are plenty of weak curves. See djb's safecurves project. Maybe the NSA found an unknown type of weakness.
13 hours ago
There are plenty of weak curves. See djb's safecurves project. Maybe the NSA found an unknown type of weakness.
There are now multiple cryptographers on this thread (not counting me; I'm not a cryptographer) explaining why this is now utterly implausible.
Unfortunately one of these cryptographers' responses are in a thread that was collapsed for wrongthink.
The word "wrongthink", always a hallmark of the arguments most worth paying attention to!