Dual EC DRBG

Dual_EC_DRBG (Dual Elliptic Curve Deterministic Random Bit Generator) is a pseudorandom number generator standardized by NIST in 2006 and based on elliptic curve operations. In 2013, documents released by Edward Snowden revealed that the NSA had intentionally inserted a backdoor into the standard: the curve parameters contained a hidden relationship that allowed anyone who knew the secret to predict the generator's output, compromising any cryptographic system that used it.

The backdoor was technically subtle and sociologically brazen. The generator was slower and more awkward than alternatives, raising suspicions among cryptographers for years. The revelation confirmed that standards bodies could be compromised at the specification level, and that mathematical opacity — parameter choices justified by authority rather than procedure — is a structural vulnerability in cryptographic governance.

Dual_EC_DRBG is the canonical case study in cryptographic standardization failure, demonstrating that trust in institutions cannot substitute for trust in verifiable procedures. The rise of transparently specified curves like Curve25519 was a direct response.