Concerns About NSA Influence on ECC Standards

We could run regular health checks on RNGs. FIPS 140-2 requires them, after all. Maybe even a stripped-down version of DIEHARD would help.

Right? They probably think the seed should be random to add some 'extra randomness'. If NSA knows how to attack certain curves, they could search SHA-1 inputs for weaknesses. That’s scary.