Dual EC DRBG

Dual_EC_DRBG (Dual Elliptic Curve Deterministic Random Bit Generator)^[1] is an algorithm that was presented as a cryptographically secure pseudorandom number generator (CSPRNG) using methods in elliptic curve cryptography. Despite wide public criticism, including the public identification of the possibility that the National Security Agency put a backdoor into a recommended implementation, it was, for seven years, one of four CSPRNGs standardized in NIST SP 800-90A as originally published circa June 2006, until it was withdrawn in 2014.

^ Barker, E. B.; Kelsey, J. M. (January 2012). "Recommendations for Random Number Generation Using Deterministic Random Bit Generators (Revised)" (PDF). National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-90A. NIST SP 800-90. Archived (PDF) from the original on 2013-10-09. Retrieved 2013-09-11. {{cite journal}}: Cite journal requires |journal= (help)

[NIST-800-90-1] Barker, E. B.; Kelsey, J. M. (January 2012). "Recommendations for Random Number Generation Using Deterministic Random Bit Generators (Revised)" (PDF). National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-90A. NIST SP 800-90. Archived (PDF) from the original on 2013-10-09. Retrieved 2013-09-11. {{cite journal}}: Cite journal requires |journal= (help)

[1]