The NSA’s Backdoor in Dual EC

Article note: Ugh. NSA has been pulling the "Surely only we, the good guys (tm) can use this backdoor we've intentionally introduced into cryptosystems we've successfully pressured the adoption of" shit since the 60s (see HY-63, https://spectrum.ieee.org/the-scandalous-history-of-the-last-rotor-cipher-machine ), despite it blowing up regularly. And, even more than "think of the children," it's always a lie. There are no attacks that "only you" can use, even if you can rationalize yourself as 'the good guys.'