3 ms·
I thought the whole point here was that Dual EC DRBG was clearly better at the time. We made the decision to use Dual EC DRBG as the default in BSAFE toolkits
by mrobot 13y ago
I thought the whole point here was that Dual EC DRBG was clearly better at the time.
We made the decision to use Dual EC DRBG as the default in BSAFE toolkits in 2004, in the context of an industry-wide effort to develop newer, stronger methods of encryption. At that time, the NSA had a trusted role in the community-wide effort to strengthen, not weaken, encryption.
- mrobot 13y agoClarification: The argument was not that it was clearly better, but that RSA believed the NSA could be trusted to have good intentions. This makes changing a bit more suspicious, but i guess the argument is that it wasn't suspicious enough to... reject $10M?