3 ms·
Let's be clear here: This is a list of product that NIST considers "validated" by an accredited lab for one or more of their SP800-09 DRBGs. Only the "Dual EC"
by marshray 13y ago
Let's be clear here: This is a list of product that NIST considers "validated" by an accredited lab for one or more of their SP800-09 DRBGs.
Only the "Dual EC" DRBG is known to be weak/backdoored.
We know that some of them do, but just because a product contains a validated Dual EC DRBG doesn't mean it's on by default.
Basically, the only reason to use such a DRBG is FIPS compliance, and since FIPS mandates so many other odd things most product has a special "FIPS mode" switch which is off by default.