Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Submission + - Dual_EC_DRBG backdoor: a proof of concept (0xbadc0de.be)

Reliable Windmill writes: From the article:
Dual_EC_DRBG is an pseudo-random number generator promoted by NIST in NIST SP 800-90A and created by NSA. This algorithm is problematic because it has been made mandatory by the FIPS norm (and should be implemented in every FIPS approved software) and some vendors even promoted this algorithm as first source of randomness in their applications.

If you still believe Dual_EC_DRBG was not backdoored in purpose, please keep reading.

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Dual_EC_DRBG backdoor: a proof of concept

Comments Filter:

"The Avis WIZARD decides if you get to drive a car. Your head won't touch the pillow of a Sheraton unless their computer says it's okay." -- Arthur Miller