Re:On the Juniper backdoor
by mtgx on Tuesday December 22, 2015 @11:26AM
(#10778576)
> and not outright malicious.
That ship may have already sailed. They could've pulled a decent "honestly, we had no idea!" excuse pre-2013, when only most of the cryptography community assumed the Dual EC was both backdoored and useless for its intended purpose, but not after it was confirmed by Snowden's documents that the NSA backdoored Dual EC, and yet they continued to use it.
And now, when they found out a(nother) nation state was using it, their "fix" is to change the parameters again instead of burning it with fire. That's strike three.
That ship may have already sailed. They could've pulled a decent "honestly, we had no idea!" excuse pre-2013, when only most of the cryptography community assumed the Dual EC was both backdoored and useless for its intended purpose, but not after it was confirmed by Snowden's documents that the NSA backdoored Dual EC, and yet they continued to use it.
And now, when they found out a(nother) nation state was using it, their "fix" is to change the parameters again instead of burning it with fire. That's strike three.