News for hackers. Stuff that matters.
Re:TP240PhoneHome Reflection/Amplification DDoS Attack Vector by MereInterest on Wednesday March 09, 2022 @09:36AM (#30614802)
In principle, that's what the NSA would be doing. When DES was developed and standardized in 1976, the NSA had input in selecting some of the constants that were chosen for it [0]. It wasn't until the late 80s when independent development of differential cryptanalysis [1] came out, and people realized that the DES constants were deliberately chosen to be resistant to this attack.

The NSA has since turned away from this responsibility, and has done the exact opposite. When Dual_EC_DRBG was developed [2], there was a similar choice of constants, with the final values having been chosen by the NSA. In this case, rather than protecting against a attack method known only by the NSA, the constants were chosen to allow an attack method known only by the NSA.

[0] https://en.wikipedia.org/wiki/Data_Encryption_Standard

[1] https://en.wikipedia.org/wiki/Differential_cryptanalysis

[2] https://en.wikipedia.org/wiki/Dual_EC_DRBG

Re:TP240PhoneHome Reflection/Amplification DDoS Attack Vector by helloooooooo on Wednesday March 09, 2022 @10:09AM (#30615214)
Or maybe the choice of Dual EC DRBG constants are intended to protect against a new cryptanalysis technique known only to the NSA
Re:TP240PhoneHome Reflection/Amplification DDoS Attack Vector by ruined on Wednesday March 09, 2022 @10:27AM (#30615476)
internal documents leaked by Snowden and reported by the NYT confirmed the intent of the program

https://en.m.wikipedia.org/wiki/Bullrun_(decryption_program)

stop simping for the nsa

Re:TP240PhoneHome Reflection/Amplification DDoS Attack Vector by vengefulduck on Wednesday March 09, 2022 @12:32PM (#30617452)
I highly doubt it. Dual EC DRBG basically works by encrypting your seed value with a NSA provided public key. It’s kinda amazing how blatant the back door is.