8 ms·
There's a huge difference between writing a paper saying "this algorithm seems good/secure" and actually backdooring an algorithm yourself. He did not work for
by meowface 11y ago
There's a huge difference between writing a paper saying "this algorithm seems good/secure" and actually backdooring an algorithm yourself. He did not work for the NSA, and there is no evidence he was aware of, let alone involved with, designing the "key escrow" in Dual_EC_DRBG.
Unless evidence of that comes to light, I don't see why his integrity should be questioned.
- HappyTypist 11y agoHowever, he did draft Extended Random which made it much easier to exploit Dual_EC in the context of TLS (which he is an expert of). This is not evidence, but this is a reason for casting suspicion.