Yeah, you&#x27;re missing the point a little. If you want to generate and standardize a random curve (like, in this paper, the &quot;random&quot; version of Curve25519, which doesn&#x27;t rely on specific magic parameters carefully chosen for speed), you have a big problem: even though your CSPRNG might be perfectly fine, nobody is going to believe that you actually used it, because you can&#x27;t prove that you did.<p>Hence: lotteries.