3 ms·
> The thing you should look at is the process, not the organization. Then there shouldn't be a problem with another organization hosting the contest than NIST?
by capableweb 4y ago
> The thing you should look at is the process, not the organization.
Then there shouldn't be a problem with another organization hosting the contest than NIST? Since I'm probably not alone in not being able to trust them anymore.
- tptacek 4y agoThere isn't a problem, except that nobody will take the other organization's contest especially seriously, or write its name into contracts.
- astrange 4y agoNobody trusted Dual_EC_DRBG despite its NIST accreditation. It was always obviously weird to experts, and it wasn't simple and performant enough for non-experts. The reason it was enabled in some systems is 1. libraries (like openssl and ffmpeg) used to implement and ship every algorithm on Earth for pride reasons 2. NSA bribed RSA BSafe to make it the default. You don't have a solution for #2.