4 ms·
The intentional weakening of ECC has been an open secret for decades, and it's suspicious that this wasn't known by Juniper. I wonder if they were coerced into
by jorblumesea 5y ago
The intentional weakening of ECC has been an open secret for decades, and it's suspicious that this wasn't known by Juniper.
I wonder if they were coerced into including it?
https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html https://www.schneier.com/blog/archives/2007/11/the_strange_s...
- Buttons840 5y agoWhat does "ECC" mean here?
- aspenmayer 5y agoI’m guessing it’s elliptic curve cryptography. https://en.wikipedia.org/wiki/Elliptic-curve_cryptography https://en.wikipedia.org/wiki/Elliptic-curve_cryptography
- NelsonMinar 5y agoThe article tells us "the Pentagon tied some future contracts for Juniper specifically to the use of Dual Elliptic Curve". That's not outright coercion but it's a significant incentive. Hell, RSA allowed itself to be corrupted for a measly $10M. https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-million-for-a-back-door-into-rsa-encryption-according-to https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-mill...
- serendipitous 5y agoThis has nothing to do with "weakening of ECC". Dual_EC_DRBG is an RNG that happens to use Elliptic Curves but its problems have nothing to do with that, they have to do with the design of the RNG itself. And those problems don't say anything about the strength of ECC used for encryption and digital signatures.