4 ms·
Nothing up my sleeve numbers are very hard to create for asymmetric crypto. Asymmetric crypto is filled with mathematical relationships and it's almost impossib
by nightcracker 13y ago
Nothing up my sleeve numbers are very hard to create for asymmetric crypto. Asymmetric crypto is filled with mathematical relationships and it's almost impossible to prove that a certain set of parameters have no "hidden" properties.
- marshray 13y agoOK, so why in the world would you use asymmetric crypto in a DRBG? It makes no sense, unless of course you wanted a system with a trapdoor hoping no one would notice.
- pbsd 13y agoIn this case, it could have been done. Dual_EC_DRBG hinges on the discrete log of two points being unknown; P and Q could have been both generated verifiably at random.
- marshray 13y agoPerhaps something like "The smallest prime number not less than the base-2 expansion of pi*2^(n - 2)".
- bajsejohannes 13y agoWhat do you mean? The (asymmetric) RSA algorithm has no numbers up its sleeve. All the numbers involved are created by the participants themselves. These "numbers up ones sleeve" would only be an issue if they are part of the algorithm itself, like the S-Boxes in the (symmetric) AES algorithm.