This talk mostly relates to the NSA's presumed poisoning of NIST SP 800-90A Dual-EC PRNG. Previously it had been asserted that generating backdoored parameters

This talk mostly relates to the NSA's presumed poisoning of NIST SP 800-90A Dual-EC PRNG. Previously it had been asserted that generating backdoored parameters was extremely hard. Green et al have an accompanying paper at USENIX Security that discusses practical exploitation of Dual-EC. http://dualec.org/DualECTLS.pdf http://dualec.org/DualECTLS.pdf