https://news.ycombinator.com/item?id=6944360 https://news.ycombinator.com/item?id=6944360 [deleted] is tptacek's comment I'm referring to, but it's quoted in t

https://news.ycombinator.com/item?id=6944360 https://news.ycombinator.com/item?id=6944360 [deleted] is tptacek's comment I'm referring to, but it's quoted in the thread. https://news.ycombinator.com/item?id=6420306 https://news.ycombinator.com/item?id=6420306 was a previous episode of the same debate. tl;dr The issue was whether or not Dual EC was an NSA backdoor, and then whether or not there were any implementations. There was a time when tptacek denied both of these, saying it was too dumb to be a backdoor, and later conceding but saying it wasn't used in any software. Interestingly, before the NSA paying RSA scandal came out, my post in the second linked thread says: > Edit: Actually, I take that back. I have no problem believing that RSA Security are perfectly sane. Would we be completely shocked if the reason they chose a questionable default was due to coercion from the spooks? Only NSA has the keys, so it's a pretty safe backdoor. Only 215 days ago, that sounded like tinfoil hat tier speculation.