&gt; What about multiple state adversaries? It would be hard as hell but it could be done.<p>Highly unlikely, there is too much money in play, too many processes to corrupt... Cryptography is usually made solid enough so that there are easier ways to break the system.<p><a href="http:&#x2F;&#x2F;cryptoexperts.github.io&#x2F;million-dollar-curve&#x2F;#lotteries" rel="nofollow">http:&#x2F;&#x2F;cryptoexperts.github.io&#x2F;million-dollar-curve&#x2F;#lotteri...</a><p>&gt; what&#x27;s wrong with nothing up my sleeve constants<p>It&#x27;s not unpredictable. There are a million constants you could choose from if you wanted to make a backdoor. I think the badass paper is about that.