It's way more complex than that. > Wouldn't this sort of thing be coming out of the NSA's budget anyway? In the grand scheme of things, yeah. NSA was spending

It's way more complex than that. > Wouldn't this sort of thing be coming out of the NSA's budget anyway? In the grand scheme of things, yeah. NSA was spending $250M to undermine cryptography [0]... fucking rats. But back when all of this was happening, I suspect that NIST actually was the one paying NSA. Reminisce back to when we all assumed that NSA weren't bad actors, do you think that NSA would be able to politically explain funding a partnership with NIST? Consider that the entire point of spending tax payer money on NIST is that they do research into standards. How could NSA explain to NIST that they randomly feel like spending money from their own budget to help them out? I could be wrong, it's hard to find information on who NIST contracts with, but I think it'd be a very odd situation for NSA to have paid NIST for the opportunity to do their job for them. The normal operation of NIST is that they give money to consultants in exchange for working on standards, it's unlikely to think it would be the other way around. > NSA can just claim they are helping to strengthen encryption... in fact that's probably exactly what they did when they first introduced DUAL_EC_DRBG to NIST in the first place. Nope. NIST was consulting with both NSA and RSA, figuring that they were getting unique opinions from both. Behind the scenes, though, NSA paid RSA $10M to begin using DUAL_EC_DRBG in a few of their products, which is kind of unprecedented because RSA sells a lot to government and NIST approval is required by software used by government. NSA then turned around and pointed at the fact that RSA was already using it, bolstering the argument they'd been trying to make to NIST the whole time. NIST then put it in. So while Massie's bill doesn't stop NIST from being infiltrated by NSA via NIST contractors, it does stop NIST and NSA from directly consulting and that's a step in the right direction. [0]: http://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html?_r=0 http://www.nytimes.com/interactive/2013/09/05/us/documents-r... [1]: http://www.reuters.com/article/2013/12/20/us-usa-security-rsa-idUSBRE9BJ1C220131220 http://www.reuters.com/article/2013/12/20/us-usa-security-rs...