4 ms·
They did have a backdoor in the Dual_EC_DRBG PRNG algorithm that was widely used. It's not a major operating system, but it was used in a lot of products. http
by kichik 10y ago
They did have a backdoor in the Dual_EC_DRBG PRNG algorithm that was widely used. It's not a major operating system, but it was used in a lot of products.
https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG
- trendia 10y agoThere are diffeeent levels of ethics in hacking: 1) finding a bug and notifying the company 2) finding a bug and releasing/selling 3) finding a bug and using it 4) intentionally adding bugs to software without notifying anyone 5) intentionally adding bugs to software and claiming it's secure This was level 5
- kichik 10y agoYou could potentially argue it's even worse. They paid RSA to intentionally add a bug so they can't be directly blamed for it.
- throwaway2048 10y agofinding a bug and releasing it, and finding a bug and selling it are hardly equivilent.
- rdtsc 10y ago> NSA had worked during the standardization process to eventually become the sole editor of the Dual_EC_DRBG standard, Yes that was a devilishly well executed backdoor, on so many levels.
- beagle3 10y agoMostly on the political level; it was considered suspect by serious cryptographers essentially as soon as it was introduced.