Re:Juniper Networks will drop code tied to National Security...
by baby on Saturday January 09, 2016 @01:03PM
(#10872167)
> After the reversing revelations published at RWC about the 2008 introduction of Dual EC to their code
So we already knew that, what made the beans tilt at RWC is when they announced that the Dual EC introduction was accompanied with the increase of the nonce length during an IKE: from 20 to 32bytes. Which basically means "hey, now we have the Dual EC backdoor in place, _AND_ we have the full 30 bytes of output + 2 bytes of the next output for easy use of the backdoor".
> Virtually nobody believes the 2012 Dual EC backdoor was implanted by NSA
Doesn't mean it's a bad theory though, it could have been them, as well as a rogue employee or a remote french spy...
So we already knew that, what made the beans tilt at RWC is when they announced that the Dual EC introduction was accompanied with the increase of the nonce length during an IKE: from 20 to 32bytes. Which basically means "hey, now we have the Dual EC backdoor in place, _AND_ we have the full 30 bytes of output + 2 bytes of the next output for easy use of the backdoor".
> Virtually nobody believes the 2012 Dual EC backdoor was implanted by NSA
Doesn't mean it's a bad theory though, it could have been them, as well as a rogue employee or a remote french spy...