4 ms·

We shouldn't be listening to the NIST for any sort of Cryptographic advice. [1] [1] https://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technolog

We shouldn't be listening to the NIST for any sort of Cryptographic advice. [1] [1] https://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technology#Controversy_regarding_NIST_standard_SP_800-90 https://en.wikipedia.org/wiki/National_Institute_of_Standard...

gruez 2y ago
So we should continue using ECB and RSA < 2048?
- y-curious 2y ago
  Not if you want to get FedRAMP designation at any point.
  - archgoon 2y ago
    Ah, but that's a beauty of it. If you encrypt with ECB you can't be decrypted by a federally compliant organization!
    - kurikuri 2y ago
      Unfortunately, a federally compliant organization could still decrypt it because ECB decryption is still allowed for legacy use.
User23 2y ago
This looks like spooks did spook stuff, got caught, and NIST fixed it? Is there evidence NIST colluded or is the NSA just good at its job?