News for hackers. Stuff that matters.
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by Xk on Tuesday December 14, 2010 @07:13PM (#2006386)
> My NDA with the FBI has recently expired [...]

Sorry, but that kind of ends it for me. Either the FBI was so ignorant they had him sign an NDA which they knew would expire, and then told him to put in backdoors; or he's lying.

Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by Create on Tuesday December 14, 2010 @07:26PM (#2006434)
Expiration date on crypto makes sense: a crypto algo and more so the implementation is only a timelock, at best, because they become increasingly easy to attack with time.

He could have signed a stock sw dev NDA form that suited everybody.

Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by Xk on Tuesday December 14, 2010 @07:36PM (#2006463)
But what doesn't make sense is that they would sign him on with an NDA that expired, knowing full well that he could then go on and tell people that the FBI had put a backdoor in something they helped to design.
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by malandrew on Tuesday December 14, 2010 @07:59PM (#2006531)
I would wager that they didn't know "full well" that they were going to request a backdoor. Remember this is the US Government we're talking about. That kind of foresight is rare and even when it does exist the left hand doesn't know what the right is doing and expiring NDAs could occur. All it takes is the person making the request to assume, "Hey, he's doing US Gov crypto work so he much have a permanent NDA. I'll go ahead and request a back door without double checking the terms of his NDA."
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by Xk on Tuesday December 14, 2010 @08:05PM (#2006554)
Yeah, that's entirely possible. I guess my argument made the assumption the government would know what it was doing.
Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by cavilling_elite on Wednesday December 15, 2010 @12:56PM (#2009019)
IF the allegations are true, I am on the side that says he misinterpreted the NDA. There could be reason to believe that the NDA had to do with his working with the FBI but the backdoor was a separate entity.

Either case, its all speculation. Hopefully this isn't a stunt to discredit oBSD. Some serious combing will be done in the code, I trust the oBSD team will do their best to clean up any mess that exists. We will all have a better oBSD after this.

Re:Allegations of FBI crypto backdoors in OpenBSD IPSEC by 9oliYQjP on Wednesday December 15, 2010 @12:14AM (#2007148)
Or maybe the NDA hasn't expired but he's misinterpreted the contract that he signed. Just like how some folks can admit they used to work for the CIA or special forces but are not allowed to talk about specific missions because they are still classified.