nucleation

LIT-043: This Secret Math Equation let the US Government Spy on Anyone

3 min read

Properties3
StatusUnavailable — seeded 2026-09-25 from the post's visible front matter; on 2026-10-14 the body was still not reachable, so it is not read and no NOTE is filed. The Substack post API returned the post with audience 'only_paid', a word count of 1,364 and a body truncated after the introduction and chapter list (no free preview). The public page shows the same. A web search for the title, the author and LeetArxiv found no other copy of the chapter: the forthcoming book it belongs to is not published, and the search results were other authors' accounts of Dual EC. A paid subscription is not a copy this client can use. It stays Unavailable until a copy is supplied.
Version2
Tagsmathematics, society-and-governance

Graph View

Murage Kibicho (2025), LeetArxiv (Substack newsletter); presented as Chapter 8 of the author’s forthcoming book “What Every Programmer Needs to Know about Finite Fields” — https://leetarxiv.substack.com/p/dual-ec-backdoor-coding-gui…

Key takeaways

  • The post is a paywalled programming tutorial that implements the Dual_EC_DRBG random-number-generator backdoor in Python, as a chapter of a book on finite fields for programmers. Nothing beyond that framing was reachable.

Seeded from the abstract alone, not a reading. What follows is what the work says about itself.

From the visible front matter: LeetArxiv describes itself as “Leetcode for implementing Arxiv and other research papers”. This post is Chapter 8 of an in-progress book on finite fields and walks through coding the Dual Elliptic Curve RNG backdoor, with “Frontmatter for the Dual Elliptic Curve RNG Whitepaper” listed as its starting point. The title frames it as the mathematics that let the US government spy. That is the post’s own headline claim, and the body that would support it was not read.

Standing in the record

Filed from the survey of 2026-09-25 of work the anthology set aside as out of scope (tier C): 315 seconds of active reading over 1 session in the papers-feed tracker. Deferred because nobody has read it closely here yet, not on merit.

Priority for a deeper reading: low — It is paywalled, it is a secondary tutorial, and the survey’s triage (“drop: a blog post”) is apt. The owner’s single session (t = 315 s) was probably on the free preview or behind the same gate.

What a deeper reading should check:

  • If the Dual EC episode is wanted, the citable sources are the primary and scholarly ones: NIST SP 800-90A (2006/2012) and its 2014 withdrawal of Dual_EC_DRBG, Shumow & Ferguson’s 2007 CRYPTO rump-session talk, and Checkoway et al., “On the Practical Exploitability of Dual EC in TLS Implementations” (USENIX Security 2014). Their details are unverified here and would need luria new lit lookups. A paywalled blog tutorial is not a filing target.
  • Tagging gap: the natural primary topic is cryptography/security, which the vocabulary lacks (none — wants: security). mathematics (elliptic curves, finite fields) and society-and-governance (state surveillance) are the nearest justifiable tags.

Access when seeded: The batch URL was truncated. I reconstructed the full slug, which matches the prefix and the title, and fetched the post (datePublished 2025-06-10T15:37Z). The post is marked “Paid”. Only the title, the subtitle (“Coding the Dual EC Crypto Backdoor in Python”), a short intro and the chapter list were visible; the body was behind a “claim my free post / purchase a paid subscription” gate. No text of the tutorial itself was read, and the keywords are inferred from the title and subtitle.

Backlinks