23 ms·
Implementing this right is surprisingly hard, as the Debian SSL fiasco and the Java/Android's so called SecureRandom RNG have shown. Maybe they were using a def
by ge0rg 12y ago
Implementing this right is surprisingly hard, as the Debian SSL fiasco and the Java/Android's so called SecureRandom RNG have shown. Maybe they were using a defective RNG for the keys as well, so in total there is a very limited number of keys out there, making collisions probable?
- duskwuff 12y agoOr possibly they seized the C&C servers and recovered all of the encryption keys stored on them?
- fragmede 12y agoThat's exactly what happened. https://securelist.com/blog/69595/challenging-coinvault-its-time-to-free-those-files/ https://securelist.com/blog/69595/challenging-coinvault-its-...