9 ms·
the very nature of a backdoor prevents you from knowing the answer to your threat model questions. If no-one knows what kind of backdoor it is, how does anyone
by barkingcat 6y ago
the very nature of a backdoor prevents you from knowing the answer to your threat model questions.
If no-one knows what kind of backdoor it is, how does anyone know how the attack works?
The only sane approach is to assume all of the above.
- schoen 6y agoI disagree: DJB and others have researched how backdoors in elliptic-curve cryptography (and other algorithms) could work. In Dual_EC_DRBG we even know exactly how they would work. While I don't believe there's any publication that explains the exact mathematics of a backdoor that could have been used in the NIST curves, I think the likely algorithmic consequences for EC security assumptions probably are understood -- just not by me. :-)