@vic @charlie_root @dcc @cowanon
>NIST P-256 curve
The elliptic curve is ackshualy fine. You are likely even using it right now (or the P-384 version) for signature verification (ECDSA), if not, you are using Curve25519 which is usually the only supported widely used alternative. The P and Q values are just points on the curve whose relationship to each other is the problematic part for the DRBG, not the curve.