Million Dollar Curve
SighThe issue here is that we need a trusted source of "nothing up my sleeve" numbers: https://en.wikipedia.org/wiki/Nothing_up_my_sleeve_numberThis is why the RFC 3526 groups use primes derived from Pi: https://tools.ietf.org/html/rfc3526I'm sure that it would be difficult to tamper with the results of lotteries held all over the world.  But it's even harder to tamper with the value of Pi.