News for hackers. Stuff that matters.

A comment on On the Juniper backdoor. Parent comment

Re:On the Juniper backdoor by count on Tuesday December 22, 2015 @01:08PM (#10779260)
This might be a stupid question, but if they're using their own values, wouldn't this have triggered issues during a FIPS assessment?

ScreenOS has been FIPS-140 validated a couple of times in the last 10 years...

[ Parent | on HN ]
Re:On the Juniper backdoor by tptacek on Tuesday December 22, 2015 @01:10PM (#10779272)
No, you're allowed to use your own values.

Also: FIPS validation isn't particularly meaningful. It's not like a serious crypto assessment.

[ Parent | on HN ]