Re:A Systematic Analysis of the Juniper Dual EC Incident [pdf]
by 45h34jh53k4j on Tuesday August 08, 2017 @12:49PM
(#14959718)
Why anyone would trust Juniper firewalls or VPN's after this incident is the question.
Against the advice of the cryptographer community, they implemented a known backdoored algorithm in 2008, and then let that backdoor be usurped by unknown attackers until discovery in 2015.
Every piece of code released by Juniper should now be questioned for back doors.
Against the advice of the cryptographer community, they implemented a known backdoored algorithm in 2008, and then let that backdoor be usurped by unknown attackers until discovery in 2015.
Every piece of code released by Juniper should now be questioned for back doors.