5 ms·
Wrong RSA is denying incorporating "a known flawed random number generator" into BSAFE in 2004. Elsewhere in the same press release RSA states that they did not
by spikels 13y ago
Wrong RSA is denying incorporating "a known flawed random number generator" into BSAFE in 2004. Elsewhere in the same press release RSA states that they did not consider Dual EC DRBG to be considered flawed until September 2013 despite being aware of concerns dating back to 2007. Therefore in 2004 when RSA added Dual EC DRBG into BSAFE it was not "a known flawed random number generator".
They also admit to a business relationship with the NSA but refuse to discuss it.
- Aloha 13y ago'Concerns' and 'known flawed' are not the same thing.
- bmelton 13y agoIt was 'known flawed' in 2007. What was not know was whether or not anyone possessed private keys that would have made that known flaw a known exploit. The knowledge that the NSA did indeed have a backdoor didn't come along until Snowden.