News for hackers. Stuff that matters.
Re:Juniper breach mystery starts to clear with new details o... by jorblumesea on Sunday September 05, 2021 @01:17PM (#28425900)
The intentional weakening of ECC has been an open secret for decades, and it's suspicious that this wasn't known by Juniper.

I wonder if they were coerced into including it?

https://www.schneier.com/blog/archives/2007/11/the_strange_s...

Re:Juniper breach mystery starts to clear with new details o... by NelsonMinar on Sunday September 05, 2021 @02:48PM (#28426671)
The article tells us "the Pentagon tied some future contracts for Juniper specifically to the use of Dual Elliptic Curve". That's not outright coercion but it's a significant incentive. Hell, RSA allowed itself to be corrupted for a measly $10M. https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-mill...
Re:Juniper breach mystery starts to clear with new details o... by serendipitous on Monday September 06, 2021 @08:18AM (#28432950)
This has nothing to do with "weakening of ECC". Dual_EC_DRBG is an RNG that happens to use Elliptic Curves but its problems have nothing to do with that, they have to do with the design of the RNG itself. And those problems don't say anything about the strength of ECC used for encryption and digital signatures.
Re:Juniper breach mystery starts to clear with new details o... by Buttons840 on Sunday September 05, 2021 @02:22PM (#28426462)
What does "ECC" mean here?
Re:Juniper breach mystery starts to clear with new details o... by aspenmayer on Sunday September 05, 2021 @02:29PM (#28426514)
I’m guessing it’s elliptic curve cryptography.

https://en.wikipedia.org/wiki/Elliptic-curve_cryptography