alt Hacker Newsdrand48() could be one of hundreds of methods that were tried to produce specific values with plausible deniability and happened to produce them. The other searches were discarded.
Replies
matthewdgreen • today at 12:22 AM
Not really plausible if it was used for all the curves.
That could be a valid suspicion if the RNG chosen was particularly obscure. drand48 isn't - it's part of the standard C library.