Funny how 2013 discoveries are tried to be forgotten and not mentioned: https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security https

Funny how 2013 discoveries are tried to be forgotten and not mentioned: https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encry... "$250m-a-year US program works covertly with tech companies to insert weaknesses into products" "The documents show that the agency has already achieved another of the goals laid out in the budget request: to influence the international standards upon which encryption systems rely." [emphasis mine] Now compare with the details from KRACK regarding Android and Linux: https://www.krackattacks.com/#details-android https://www.krackattacks.com/#details-android "Our attack is especially catastrophic against version 2.4 and above of wpa_supplicant, a Wi-Fi client commonly used on Linux. Here, the client will install an all-zero encryption key instead of reinstalling the real key. This vulnerability appears to be caused by a remark in the Wi-Fi standard that suggests to clear the encryption key from memory once it has been installed for the first time." [emphasis mine] Sometimes adding an innocent-appearing remark, and later acting on it would be all that's needed for a rich and mighty adversary. I don't claim it happened this time, but I worry when the possibility isn't being considered and properly investigated.