News for hackers. Stuff that matters.
Re:Selecting and Hardening Remote Access VPN Solutions [pdf] by beermonster on Wednesday September 29, 2021 @04:01AM (#28691338)
Would you trust the NSA’s thoughts on recommended algs given their chequered history?
Re:Selecting and Hardening Remote Access VPN Solutions [pdf] by er4hn on Wednesday September 29, 2021 @12:37PM (#28696142)
I don't necessarily trust the NSA, things like DUAL EC DRBG are an excellent reason why.

However the govt standards for cryptography to use are known as FIPS 140. These standards are made by NIST, which has the NSA either heavily own or directly write the documents. This means that the NSA is defining the crypto standards for the rest of US Gov.

The conclusion is that if you want wireguard in govt networks, the NSA must bless their crypto primitives and algorithms. That's why I want to know their thoughts on it.

Re:Selecting and Hardening Remote Access VPN Solutions [pdf] by Spooky23 on Wednesday September 29, 2021 @08:40AM (#28692830)
You need read between the lines and look at the full context of what they recommend.

Just saying “NSA bad” is a lazy argument.

Re:Selecting and Hardening Remote Access VPN Solutions [pdf] by z3ncyberpunk on Wednesday September 29, 2021 @10:11AM (#28693897)
> Just saying “NSA bad” is a lazy argument.

Yeah, so is that, and a stupid one given how much they, NIST, and the CIA rig things like elliptical curve standards