Re:The Joy of Cryptography
by tptacek on Thursday November 25, 2021 @01:15PM
(#29343584)
Dan Bernstein wrote a paper everyone refers to as BADA55 which essentially suggests that virtually every curve in common use other than his are potentially backdoored, even if they're derived from fundamental mathematical constants (in fact, demonstrating that possibility is the point of the paper). So I'd be careful about using Bernstein as a load-bearing citation for this argument.
Again: Koblitz and Menezes take up this topic in detail.
Again: Koblitz and Menezes take up this topic in detail.