4 ms·
> Members of a hacking group linked to the Chinese government called APT 5 hijacked the NSA algorithm in 2012, according to two people involved with Juniper’s i
by markus_zhang 5y ago
> Members of a hacking group linked to the Chinese government called APT 5 hijacked the NSA algorithm in 2012, according to two people involved with Juniper’s investigation and an internal document detailing its findings that Bloomberg reviewed. The hackers altered the algorithm so they could decipher encrypted data flowing through the virtual private network connections created by NetScreen devices. They returned in 2014 and added a separate backdoor that allowed them to directly access NetScreen products, according to the people and the document.
Can we have more technical details regarding this? I guess some heavy math (number theory) is involved here but really intrigued how it was developed.
- Arkanum 5y agoComputerphile[1] did a video about the specifics of the backdoor in Dual EC DRBG. As i understand it, the hackers replaced a magic number Q with a different value than the standards compliant one, where they had pre-computed P. [1]:https://www.youtube.com/watch?v=nybVFJVXbww https://www.youtube.com/watch?v=nybVFJVXbww
- khuey 5y agoAPT 5 hacked into Juniper and replaced an input parameter to the Dual EC PRNG that was backdoored by the NSA with one that was backdoored by them. https://dl.acm.org/doi/pdf/10.1145/3266291 https://dl.acm.org/doi/pdf/10.1145/3266291 goes into it in some detail