Super silly but I'm searching for a mathematical backdoor in Bitcoin's secp and the secr curve. I saw that both curves use unsafe primes (p-1 factors pretty well) for the generator order.

So I'm trying to define a multiplication operation using primitive roots.

[0] https://leetarxiv.substack.com/p/if-youre-smart-why-are-you-...

[1] (The other time the US gov put a backdoor in an elliptic curve) https://leetarxiv.substack.com/p/dual-ec-backdoor-coding-gui...