It <i>really isn&#x27;t</i> backdoored, though. Bada55 made a legit point that curves shouldn&#x27;t be required to derive from simple math constants, but it does less of a good job showing that math constants are themselves necessarily untrustworthy. You&#x27;d need an awfully funky looking set of constants to get the degree of freedom bada55 proposes.