2 ms·
The problem with NIST (and I believe they admitted this is a problem) is that NIST is required by law to use the relevant experts from government agencies[0], w
by jonathankoren 10y ago
The problem with NIST (and I believe they admitted this is a problem) is that NIST is required by law to use the relevant experts from government agencies[0], which normally is fine, and exactly what you want. However, the agency when it comes to security is NSA, and their in the business of undermining it. Thus the whole ECC backdoor debacle.[1]
NIST seems like a good agency trying to do the right things. It's just that they're forced to work with bad actors.
[0] https://www.accessnow.org/its-not-you-its-me-committee-of-cryptographic-experts-tries-to-crack-nist-n/ https://www.accessnow.org/its-not-you-its-me-committee-of-cr...
[1] http://www.nist.gov/itl/csd/sp800-90-042114.cfm http://www.nist.gov/itl/csd/sp800-90-042114.cfm