Re:TP240PhoneHome Reflection/Amplification DDoS Attack Vector
by helloooooooo on Wednesday March 09, 2022 @10:09AM
(#30615214)
Or maybe the choice of Dual EC DRBG constants are intended to protect against a new cryptanalysis technique known only to the NSA
Re:TP240PhoneHome Reflection/Amplification DDoS Attack Vector
by ruined on Wednesday March 09, 2022 @10:27AM
(#30615476)
internal documents leaked by Snowden and reported by the NYT confirmed the intent of the program
https://en.m.wikipedia.org/wiki/Bullrun_(decryption_program)
stop simping for the nsa
Re:TP240PhoneHome Reflection/Amplification DDoS Attack Vector
by vengefulduck on Wednesday March 09, 2022 @12:32PM
(#30617452)
I highly doubt it. Dual EC DRBG basically works by encrypting your seed value with a NSA provided public key. It’s kinda amazing how blatant the back door is.
The NSA has since turned away from this responsibility, and has done the exact opposite. When Dual_EC_DRBG was developed [2], there was a similar choice of constants, with the final values having been chosen by the NSA. In this case, rather than protecting against a attack method known only by the NSA, the constants were chosen to allow an attack method known only by the NSA.
[0] https://en.wikipedia.org/wiki/Data_Encryption_Standard
[1] https://en.wikipedia.org/wiki/Differential_cryptanalysis
[2] https://en.wikipedia.org/wiki/Dual_EC_DRBG