News for hackers. Stuff that matters.

A comment on Why Did Satoshi Decide to Use Secp256k1 Instead of Secp256r1?. Parent comment

Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by dan-robertson on Saturday October 09, 2021 @08:14PM (#28814550)
The Juniper hack (where their firewall product had a backdoor injected) was enabled by someone breaking into the company and modifying the parameters for Dual_EC_DRBG. It was sufficient for the algorithm to allow for a backdoor for there to be problems. Presumably it would have been caught sooner had the hack required a backdoor to be hidden in the source code and not some bytes that looked like a magic constant.
[ Parent | on HN ]
Re:Why Did Satoshi Decide to Use Secp256k1 Instead of Secp25... by ryanlol on Sunday October 10, 2021 @07:08AM (#28817475)
Dual_EC_DRBG is bad because someone with access to Junipers source repos was able to backdoor their implementation? Do you realise how preposterous that sounds?

> Presumably it would have been caught sooner had the hack required a backdoor to be hidden in the source code and not some bytes that looked like a magic constant.

Have you seen what real life bugdoors look like?

[ Parent | on HN ]