3 ms·
> Effectively giving them a backdoor that nobody else has. Until they do...then you go from 100% to 0% as TFA states. All it takes is someone figuring out how
by UncleEntity 7y ago
> Effectively giving them a backdoor that nobody else has.
Until they do...then you go from 100% to 0% as TFA states.
All it takes is someone figuring out how the NSA generated their magic constants (which obviously contain a flaw) and its game over.
- admax88q 7y agoSure but that's not the argument that the article made. Thats an important point to discuss and there may be ways to mitigate the damage of such a compromise (multiple curves, per key escrow). The article made a ridiculous argument for why backdooring is "impossible". Presumably they made it to persuade laypeople but what they really did is misinform laypeople and set them up to be pushed to the other side when they find they've been lied to. Not to mention you're also fucked if an unintentional flaw is discovered in AES or similar. You still need to be able to upgrade you crypto in response to advances in the state of the art, or leakage of important secrets.