3 ms·
Am I understanding this correctly, Juniper is simply setting the Dual-EC DRBG constants back to the values they chose themselves? So if they originally chose va
by fabian2k 11y ago
Am I understanding this correctly, Juniper is simply setting the Dual-EC DRBG constants back to the values they chose themselves? So if they originally chose values that would create a backdoor, this backdoor would be accessible again?
Ripping out Dual EC DRBG entirely seems to be the only sensible choice here.
- lagadu 11y agoYou are understanding it correctly, yes.
- tyho 11y agoOnly from the perspective of somebody who wants a secure Internet. Apparently Juniper do not fit in that category.
- x5n1 11y agoThere are probably users of this bug that would not be happy if Juniper all the sudden cut support to their paying customers utilizing the bug. It's a feature not a bug ;)
- ZoFreX 11y agoDefinitely. But this was a quick fix due to its nature. It's possible that they know their original values are good, and this is therefore the smallest change to quickly get this out of the hands of... whoever had it. Of course, I think we'd all like to see it ripped out entirely, but that is a larger change that would need some time and care taken over it. Hopefully this is what's going on...