4 ms·

I remember hearing about some feature being removed from OpenSSL not long ago after it was discovered that it couldn't have been used because... it didn't actua

I remember hearing about some feature being removed from OpenSSL not long ago after it was discovered that it couldn't have been used because... it didn't actually compile(?), if memory serves. Sorry, I don't remember all the details at the moment (it's almost 7am and I've been awake for ~36 hours). I'm assuming that's what this is about but maybe not.

shalmanese 10y ago
That was the notorious Dual_EC_DRGB which was backdoored by the NSA but was broken inside of OpenSSL without anyone noticing: https://nakedsecurity.sophos.com/2013/12/22/the-openssl-software-bug-that-saves-you-from-surveillance/ https://nakedsecurity.sophos.com/2013/12/22/the-openssl-soft...