4 ms·
Something I still fail to grasp entirely: according to the Twitter feed discussed here previously [1] the NSA just wanted Dual EC "in there", even, if nobody wo
by masswerk 5y ago
Something I still fail to grasp entirely: according to the Twitter feed discussed here previously [1] the NSA just wanted Dual EC "in there", even, if nobody would use it, but they could use it. (They would even allow the choice of alternative values for P and Q.) Was this relying on negotiating encryption methods while establishing connections? Or did this imply yet another attack?
[1] https://news.ycombinator.com/item?id=28404219 https://news.ycombinator.com/item?id=28404219
- dannyw 5y ago1. Get the code in there. 2. Tie up a commercial contract with this mode being made the default. It’s just Apple CSAM all the way down.
- masswerk 5y agoI would have thought, provided that the aforementioned statements were factual, you had to have some mechanism in place to force a connection to default to this algorithm for this to be useful in a more general way. (Apparently, you want to tap into third party conversations, but are not relying on them actually using this algorithm, rather, just having it implemented.)