3 ms·
> There’s been speculation about whether the UK, China or > the NSA are to blame — but today’s revelation strongly > suggests that it might have been the US.
by A1kmm 11y ago
> There’s been speculation about whether the UK, China or
> the NSA are to blame — but today’s revelation strongly
> suggests that it might have been the US.
Why would the NSA infiltrate Juniper to change the Dual EC DBRG parameters, when the standard parameters are already exactly how they want them?
There is a good chance they noticed that their attacks against Dual_EC_DBRG weren't working - but to reveal that pre-Snowden would prove that they knew the private key and were exploiting it.
That said, I understand there was more than one back-door disclosed.
- djcapelis 11y agoFWIW, I believe people have said that Juniper was always using non-standard EC DBRG parameters. The backdoor changed those parameters to something else. So the NSA wouldn't have already had the parameters they wanted.