The two people were Bob Reiter and Jerry Solinas. Jerry wrote in a 2015 email to Daniel Bernstein that he thought it was a hash of the passphrase. I corroborated that story with 4 people, including two ex-NSA folks off the record.

Everyone was wrong!

I wasn't able to reach Bob. He was working in private industry as of 2018, but never responded.

▲

lifeisloving an hour ago | parent | next [-]

Kind of sus that they would spread a rumor that its a phrase. This isnt something I would forget, or confuse with a timestamp..

	▲	ACCount39 18 minutes ago \| parent [-]
		It's possible that this "phrase hash" method was used for a different case - like another, unrelated and possibly unreleased algorithm. And then it was confused for the one used for those curves.

▲

Pannoniae an hour ago | parent | prev [-]

or they were lying...