4 ms·
Perhaps. But the problem is that we don't actually know any specific way that NIST could have selected malicious ECC constants. So the problem is that whatever
by nullc 13y ago
Perhaps. But the problem is that we don't actually know any specific way that NIST could have selected malicious ECC constants. So the problem is that whatever bad property they might have selected for may also exist in your randomly selected ones.
- tptacek 13y agoWe actually know quite a bit about how NIST generated the random curves, since the methodology (which is based on hashing strings) is in the document that defines the curves.
- nitrogen 13y agoIn theory, could NIST, with NSA's help, have used the "parallel construction" approach and generated "bad" parameters using a supposedly benign process?
- tptacek 13y agoYes, in theory. But it would be difficult and risky.
- nullc 13y agoPlease reread my post, you seem to have misparsed it. I was not saying that we don't know how they were generated, you can see that I was posting otherwise at the same time elsewhere.