4 ms·
While RSA isn't a state-funded technology company, they did accept a $10M payment from the NSA to make their BSafe security product default to use the DUAL_EC_D
by billyhoffman 4y ago
While RSA isn't a state-funded technology company, they did accept a $10M payment from the NSA to make their BSafe security product default to use the DUAL_EC_DRBG cryptographically secure pseudorandom number generator. Which the NSA had designed and backdoored...
https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-million-for-a-back-door-into-rsa-encryption-according-to https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-mill...
- XorNot 4y agoAre the primary sources on this story from the Snowden leaks available somewhere? Even the article here points to another Reuters article which isn't available any more, and I've never been able to find out which documents people were referencing about this?
- Red_Leaves_Flyy 4y agoCheck the torrents?
- supriyo-biswas 4y agohttps://hyperelliptic.org/tanja/vortraege/20140506.pdf https://hyperelliptic.org/tanja/vortraege/20140506.pdf contains excerpts from the original article. Also searching for “Project Bullrun” brings up various articles on the Dual EC DRBG attacks.
- localplume 4y ago[flagged]