user11022

Unregistered less info
26 reputation
3
bio website
location
age
visits member for 8 months
seen Jan 7 at 0:24

Dec
22
comment How does a backdoor in the RNG enable an attacker to break encryption protocols?
I guess the "good news" would be that I could protect myself by making sure that my computers don't use Dual-EC, because, at least in the case of TSL/SSL, the RNG on the server doesn't really matter.
Dec
22
comment How does a backdoor in the RNG enable an attacker to break encryption protocols?
@e-sushi I am certainly not asking for a "how to hack" manual. Just want to clarify in more detail why a backdoor in an RNG is such a big deal. For example, the Schneier article from the first comment says "To put that in real terms, you only need to monitor one TLS internet encryption connection in order to crack the security of that protocol." That doesn't seem obvious to me, although thanks to the answer below I understand better.
Dec
22
awarded  Scholar
Dec
22
accepted How does a backdoor in the RNG enable an attacker to break encryption protocols?
Dec
22
comment How does a backdoor in the RNG enable an attacker to break encryption protocols?
Thanks for the answer and the link. So if understand the SSL example correctly, the problem would be if the client's machine is using Dual-EC, since the client and not the server sends the encrypted pre-master secret. But that is a good clarifying example. I imagine that is not the only example or a protocol where the same RNG might be used to generate both public and private random bits, and so the public random bits could be used to figure out the private ones.
Dec
22
comment How does a backdoor in the RNG enable an attacker to break encryption protocols?
@HenrickHellström Thanks for the article, but it doesn't seem explain how a backdoor in the RNG could be used to actually break any encryption protocols.
Dec
21
awarded  Editor
Dec
21
revised How does a backdoor in the RNG enable an attacker to break encryption protocols?
added 12 characters in body
Dec
21
awarded  Student
Dec
21
asked How does a backdoor in the RNG enable an attacker to break encryption protocols?