On the Juniper backdoor

Re:On the Juniper backdoor by fabian2k on Tuesday December 22, 2015 @06:26AM (#10777080)

Am I understanding this correctly, Juniper is simply setting the Dual-EC DRBG constants back to the values they chose themselves? So if they originally chose values that would create a backdoor, this backdoor would be accessible again?

Ripping out Dual EC DRBG entirely seems to be the only sensible choice here.

[ Parent | on HN ]

Re:On the Juniper backdoor by ZoFreX on Tuesday December 22, 2015 @02:47PM (#10779893)

Definitely. But this was a quick fix due to its nature. It's possible that they know their original values are good, and this is therefore the smallest change to quickly get this out of the hands of... whoever had it. Of course, I think we'd all like to see it ripped out entirely, but that is a larger change that would need some time and care taken over it. Hopefully this is what's going on...

[ Parent | on HN ]

Re:On the Juniper backdoor by tyho on Tuesday December 22, 2015 @06:29AM (#10777097)

Only from the perspective of somebody who wants a secure Internet. Apparently Juniper do not fit in that category.

[ Parent | on HN ]

Re:On the Juniper backdoor by x5n1 on Tuesday December 22, 2015 @07:52AM (#10777426)

There are probably users of this bug that would not be happy if Juniper all the sudden cut support to their paying customers utilizing the bug.

It's a feature not a bug ;)

[ Parent | on HN ]

Re:On the Juniper backdoor by lagadu on Tuesday December 22, 2015 @08:59AM (#10777756)

You are understanding it correctly, yes.

[ Parent | on HN ]