Submission + - Dual_EC_DRBG backdoor: a proof of concept (0xbadc0de.be)
Reliable Windmill writes: From the article:
Dual_EC_DRBG is an pseudo-random number generator promoted by NIST in NIST SP 800-90A and created by NSA. This algorithm is problematic because it has been made mandatory by the FIPS norm (and should be implemented in every FIPS approved software) and some vendors even promoted this algorithm as first source of randomness in their applications.
If you still believe Dual_EC_DRBG was not backdoored in purpose, please keep reading.
Dual_EC_DRBG is an pseudo-random number generator promoted by NIST in NIST SP 800-90A and created by NSA. This algorithm is problematic because it has been made mandatory by the FIPS norm (and should be implemented in every FIPS approved software) and some vendors even promoted this algorithm as first source of randomness in their applications.
If you still believe Dual_EC_DRBG was not backdoored in purpose, please keep reading.
