Exactly. I attack and repair the Curve25519 backdoor using Elligator in illusoryTLS, a talk delivered at HITB SecConf (and other conferences) based on my entry to the first Underhanded Crypto Contest <a href="http:&#x2F;&#x2F;illusoryTLS.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;illusoryTLS.com&#x2F;</a><p>Code at <a href="https:&#x2F;&#x2F;github.com&#x2F;secYOUre&#x2F;rsaelligatorbd" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;secYOUre&#x2F;rsaelligatorbd</a>