HN Theater @HNTheaterMonth

This Computerphile video is what convinced me something fishy was going on

https://www.youtube.com/watch?v=nybVFJVXbww

⬐ alrlroipsp

Thanks for sharing that video.

⬐ veqq

NIST Dual EC DRBG never really gained adoption. As far as I could find, some did use it for FIPS conformity until 2014. The attempt is still egregious though.

Long story short is that we don't know for sure, but there are some possibilities that's makes it plausible

https://youtu.be/nybVFJVXbww

Computerphile[1] did a video about the specifics of the backdoor in Dual EC DRBG.

As i understand it, the hackers replaced a magic number Q with a different value than the standards compliant one, where they had pre-computed P.

[1]:https://www.youtube.com/watch?v=nybVFJVXbww

Here's a computerphile video that explains it very simply: https://youtu.be/nybVFJVXbww

⬐ Cantinflas

Thanks! Thanks to the other answers too. Amazing stuff!

⬐ sundarurfriend

> But then the Snowden leaks came along, and it looks even more suspicious.

> Money was changing hands between the NSA and companies, to have them install this as their standard for number generation. That's deeply suspicious.

(-from the video)

That's one piece of information I didn't know, and doesn't usually get mentioned in the discussions I've seen about this.