4 ms·
Maybe. NSA wants algorithms to be secure against anyone but them. Perhaps this algorithm cannot contain something in the form of Dual EC_DRBG, where they're e
by cameldrv 8y ago
Maybe. NSA wants algorithms to be secure against anyone but them. Perhaps this algorithm cannot contain something in the form of Dual EC_DRBG, where they're effectively handing out a public key as part of the algorithm and they have the private key. However, it could also be that there are particulars of the algorithm that make hardware that the NSA has and doesn't expect anyone else to be able to obtain, work especially well.
- tptacek 8y agoFor us, "IOT" means "Internet-connected refrigerator". From NSA's vantage point, though, it includes billions of dollars in embedded industrial equipment that is taking advantage of the same technology that's allowing us to wire up our toasters. If that equipment is insecure simply because vendors can't get AES working on a PIC or MSP embedded SOC, you have a nation-scale problem. It then starts to make sense that they'd work to provide an "officially blessed" cipher that can work in those environments. We also forget that though we don't trust NSA (and shouldn't), American industry sure does.