Depends on what you mean by &quot;any plausible reason&quot;.<p>There were cryptographers who could have given you a <i>plausible</i> reason to use Dual_EC --- all of them would have recommended against doing so, though.<p>But there&#x27;s no practical reason.