News for hackers. Stuff that matters.

A comment on Technical feasibility of decrypting https by replacing the computer's PRNG. Parent comment

Re:Technical feasibility of decrypting https by replacing th... by tptacek on Sunday July 14, 2013 @10:14PM (#6043288)
No, this isn't true; rather, it's something people on HN and Reddit say to make themselves feel smarter. In cryptography, it has been article of faith for decades that the NSA is actively working to subvert the security of public cryptography.

The problem with the rdrand conspiracy theory isn't that it's unreasonable to believe the NSA is trying to backdoor something; it's that it's a stupid backdoor, and that the logic that delivers you to the conclusion that it's a backdoor also concludes that everything else must be a backdoor.

[ Parent | on HN ]
Re:Technical feasibility of decrypting https by replacing th... by nitrogen on Monday July 15, 2013 @12:22AM (#6043698)
I was only addressing res0nat0r's comment that the NSA's broad surveillance was well known, not the possibility that Intel's HWRNG is compromised. I agree that if you can't trust your CPU, all bets are off, but there is probably a different way of expressing the futility and improbability of such a situation that doesn't use the word tinfoil.
[ Parent | on HN ]