5 ms·

CNSA isn't an algorithm. It's the NSA's update to what used to be called "Suite B". It's a set of algorithms that NSA recommends for use in National Security S

CNSA isn't an algorithm. It's the NSA's update to what used to be called "Suite B". It's a set of algorithms that NSA recommends for use in National Security Systems (classified systems that use unclassified algorithms). Currently, that's AES-256, ECDH over P-384, ECDSA over P-384, SHA-384, and then also RSA/DH with a >3072 modulus.

na85 9y ago
So is WPA3 defective by design, then? I sure don't trust modern NSA-designed algorithms.
- jitl 9y ago
  These are publicly designed algorithms that are widely used. It just so happens that the NSA also recommends then.
  - ktta 9y ago
    P-256 and P-384 have some "NSA" stigma associated with them though.
- jlgaddis 9y ago
  Which of the above do you think are "NSA-designed algorithms"? The real NSA algorithms are part of "Suite A", which you don't have to worry about trusting because they aren't public. (I've chosen not to use things like the NIST curves for ECDSA, though.)
  - tptacek 9y ago
    Technically: SHA-2 and P-curve ECDH.
    - jlgaddis 9y ago
      Thanks, it was mostly a rhetorical question for the user who seems to think that the NSA designed all of them. (For some reason, I've met a lot of people who think NSA designed AES, for example.)