News for hackers. Stuff that matters.
Re:Dual_EC_DRBG backdoor: a proof of concept by aris_ada on Wednesday January 01, 2014 @01:45PM (#6995938)
No, they plan on removing the PRNG from their release. I understand better why my POC worked without triggering the bug. From the mail archive: ". When the discard occurs the data must not be output and the Dual EC DRBG state must be updated, but that state update isn't done. In the case of no additional input this has no effect, but additional input is used by the "FIPS capable" OpenSSL. Note that additional input does not effectively defeat the backdoor vulnerability[3]."

I do not use the reseed functionality either, because I only generate two or three output blocs and never call an explicit reseed.

There are no comments on this comment yet.