14 ms·
Perhaps OP was thinking of the criticisms around Dual-EC-DRBG? https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG
by velosol 7y ago
Perhaps OP was thinking of the criticisms around Dual-EC-DRBG?
https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG
- codesushi42 7y agoThat is another example, yes. But the NSA purposely dictated that DES use 56 bit keys (a strange choice of key length to begin with), so that it would be possible for brute force attacks using government mainframes. The original proposal was for 128 bits IIRC. This was way back before many people studied cryptanalysis, which is why no one cared at the time.