7 ms·
> So instead, they generated their own private keys and embedded them in the CSPRNGs of the VPNs they sold to customers. Isn't it possible to still get this PR
by qb45 11y ago
> So instead, they generated their own private keys and embedded them in the CSPRNGs of the VPNs they sold to customers.
Isn't it possible to still get this PRNG right by discarding the private part?
Not that mere use of such infamous algorithm isn't crazy anyway, especially since even if they did the right thing they can't prove it.
- detaro 11y agoDepends on how hard it is to break. Even if it takes a while and a lot of money, for something as widespread as their firewalls, it might have been worth the effort to someone. Of course only if it is in the category of "a while and expensive", not in "impossible"?