<i>&gt; Now, we&#x27;ve known for a long time that we want rigid curve generation</i><p><i>&gt;A rigid curve standard can generate only one or a very few curves. A non-rigid generation procedure might generate millions or billions of different curves. That&#x27;s bad news, because it means that corrupt standards bodies can search those billions of curves for one with a weakness that only they know about.</i><p>This looks like a contradiction.<p>It wouldn&#x27;t surprise me in the least if every concrete function had some degree of weakness, and if finding that weakness requires vast computational resources, then we hardly need corrupt standards bodies to find them in advance.<p>Can you square this circle for me, Thomas?