@vic @charlie_root @dcc @cowanon

>People found out about Dual_EC_DRBG due to the weird funding associated with it.
Ackshualy, cryptoanalysts knew right from the start that it was very suspicious. The funding was revealed only years later in the Snowden leaks and the only lead they originally had was that NIST implied that NSA made the algorithm and specified the P and Q values.