Timeline for Who uses Dual_EC_DRBG?
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 17, 2020 at 8:17 | history | edited | CommunityBot |
Commonmark migration
|
|
| Sep 28, 2013 at 19:15 | comment | added | Ilmari Karonen | @nealmcb: True. Color me surprised. | |
| Sep 28, 2013 at 14:23 | comment | added | nealmcb | Disproved by the announcement from RSA that their flagship BSAFE product uses it by default. Astonishing but true. A Few Thoughts on Cryptographic Engineering: RSA warns developers not to use RSA products | |
| Sep 11, 2013 at 19:25 | comment | added | Reid | @cce: What you say sounds like speculation too ... who says their goal was to get a backdoor into a standard? Even if it was, were they successful with Dual_EC_DRBG, or were they thinking about another standard? My point is that pretty much everything in the NSA-related discussions is speculation based on some vague, general facts. I don't think it's unreasonable to suggest that the NSA may suffer from bureaucracy: the rest of the government seems consumed in it, so what makes the NSA special? | |
| Sep 6, 2013 at 4:42 | comment | added | cce | Not spot-on — reads like an awful lot of groundless speculation about internal politics within the NSA. They had a goal (get a backdoor into a NIST/FIPS-approved standard) and accomplished it. Look at the list of vendors (linked from the other answer to this question) who have had their Dual_EC_DRBG implementation certified by NIST — lots of hardware, software, & networking companies are listed. It seems likely that at least some of those vendors have shipped products that use Dual_EC_DRBG for "secure" communications purposes. What's surprising about that? | |
| Sep 5, 2013 at 23:24 | comment | added | Reid | I think this answer is quite spot-on. While there are definitely smart folks at the NSA, I doubt that they don't occasionally suffer from bureaucratic circumstances like the hypothetical scenario you've outlined here... any big organization, no matter how smart its constituents (and indeed perhaps because of their intelligence) is probably going to have that bureaucratic weight. | |
| Sep 5, 2013 at 23:18 | history | answered | Ilmari Karonen | CC BY-SA 3.0 |