Mathematics Stack Exchange is a question and answer site for people studying math at any level and professionals in related fields. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I recently started learning about encryption. I read about how elliptic curves can be used to create pseudo random numbers (and how the nsa might have abused this fact to create a backdoor in encryptions software).

So as I understand in an elliptic curve takes the form of $y^2=x^3-3x+b$. The algorithm provide by NIST in appendix A1 describes how a set of pseudo random number can be generated using a very big prime number.

In the context of learning more about pseudo random numbers I would like to create my own pseudo random number generator based on the algorithm. Preferable I would like to do this using a small primes number so I can also practice breaking encryption based on it.

Now the problem is I am not that great in Maths or programming yet... so sketch in the NIST document is a little vague in my eyes. Essentially I have not clue where to start build my program.

share|cite|improve this question
You may hope for an English subtitle version of‌​0-zwischen_supersicherer_verschlusselung_und_klartext_liegt_nur_ein_falsches_bi‌​t-_qbi.html ("Between supergood encryption and clear text is just one bit" - typical misconceptions of crypto: "long keys are better than short ones", "Coding RSA or AES is easy", "Want random? Take java.util.random" and othe rmisconceptions) – Hagen von Eitzen Jan 11 '14 at 22:42
Also check this out:… – 1110101001 Jan 11 '14 at 23:41
One problem I see with your question: If you know what the term "the group of points of an elliptic curve over a finite field" means, the specification is not vague. If you don't (which is nothing to be ashamed of), it seems that a lot of explaining is necessary - and that means you should split your question to digestible bits. – Hagen von Eitzen Jan 12 '14 at 12:25
@HagenvonEitzen Well it might be a little vague for me. As I understand it the finite field has to do with the clock arithmetic involved..Is that true? – Niels B Jan 13 '14 at 11:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.